Exam objective
MD-102Implement Intune Suite add-on capabilities
This objective sits in Manage and maintain devices, which carries 28% of the MD-102 Endpoint Administrator exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
With Endpoint Privilege Management, how do standard users run an IT-approved app that needs admin rights?
Correct.
Concept
EPM keeps users as standard users while elevating only approved tasks just in time. It avoids granting broad local admin rights.
Why B
EPM lets users trigger specific IT-approved binaries or scripts to run with elevated access temporarily.
Source
Microsoft, Endpoint Privilege Management overview, checked August 2026With Microsoft Intune Endpoint Privilege Management (EPM) your organization's users can run as a standard user (without administrator rights) and complete tasks that require elevated privileges.
Now you: practice questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
Which file types can Endpoint Privilege Management support for elevation?
Sample question 2 of 3
Which EPM elevation type lets end users run apps through a right-click 'Run with elevated access' menu, optionally with justification?
Sample question 3 of 3
You are ready to configure elevation rules. What must you do before you can use Endpoint Privilege Management policies?
That’s 3 of the full MD-102 Endpoint Administrator bank.
Keep going free: 10 questions per certification in bank practice, with no account.
Continue practisingRead the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.