Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
You are preparing your Microsoft 365 tenant for a bring-your-own-device (BYOD) program. Workers will use personal Windows 11 laptops that must appear in Microsoft Entra ID so that Conditional Access policies can evaluate the device identity, but IT must not take full management control of the computers. Which single end-user action directly initiates registration of a personal Windows device in Microsoft Entra ID without joining it to the tenant?
Open an elevated PowerShell session and run dsregcmd.exe /debug /status.
Restart Windows while holding Shift and choose a provisioning option for work access during the out-of-box experience (OOBE).
In Windows Settings, select Accounts > Access work or school > Connect and add the corporate user account.
Sign in to Windows using the Microsoft 365 work account instead of a local or Microsoft consumer account.
Adding a work account under Settings > Accounts > Access work or school > Connect starts Workplace Join. During this process Windows creates a primary refresh token (PRT) for the user and silently registers the local device object in Microsoft Entra ID as Azure AD registered. The device remains owned by the user and is not Azure AD joined or hybrid joined, so IT receives only the device identity needed for Conditional Access.
Choosing a work or school account at Windows sign-in would perform an Azure AD join, giving IT full control and therefore does not meet the requirement. Running dsregcmd.exe in a terminal only displays or forces a join operation and does not by itself register a personal device. Selecting any advanced start-up option during reboot is unrelated to Entra device registration.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the primary refresh token (PRT)?
Open an interactive chat with Bash
What is the difference between Azure AD-registered, Azure AD-joined, and hybrid-joined devices?
Open an interactive chat with Bash
How does Conditional Access evaluate device identity?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Prepare infrastructure for devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .