MD-101 Exam Format | MD-101 Course Contents | MD-101 Course Outline | MD-101 Exam Syllabus | MD-101 Exam Objectives

This exam measures your ability to accomplish the following technical tasks: deploy and update operating systems; manage policies and profiles; manage and protect devices; and manage apps and data. If you passed Exam 70-698 before it expired on March 31, 2019, you only need to take MD-101 to earn the Modern Desktop certification.



Deploy and update operating systems (15-20%)

Manage policies and profiles (35-40%)

Manage and protect devices (15-20%)

Manage apps and data (25-30%)



Deploy and update operating systems (35-40%)

Plan and implement Windows 10 by using dynamic deployment

• evaluate and select an appropriate deployment options

• pilot deployment

• manage and troubleshoot provisioning packages


Plan and implement Windows 10 by using Windows Autopilot

• evaluate and select an appropriate deployment options

• pilot deployment

• create, validate, and assign deployment profile

• extract device HW information to CSV file

• import device HW information to cloud service

• troubleshoot deployment


Upgrade devices to Windows 10

• identify upgrade and downgrade paths

• manage in-place upgrades

• configure a Windows analytics environment

• perform Upgrade Readiness assessment

• migrate user profiles


Manage updates

• configure Windows 10 delivery optimization

• configure Windows Update for Business

• deploy Windows updates

• implement feature updates

• monitor Windows 10 updates


Manage device authentication

• manage authentication policies

• manage sign-on options

• perform Azure AD join


Manage policies and profiles (25-30%)

Plan and implement co-management

• implement co-management precedence

• migrate group policy to MDM policies

• recommend a co-management strategy


Implement conditional access and compliance policies for devices

• implement conditional access policies

• manage conditional access policies

• plan conditional access policies

• implement device compliance policies

• manage device compliance policies

• plan device compliance policies


Configure device profiles

• implement device profiles

• manage device profiles

• plan device profiles


Manage user profiles

• configure user profiles

• configure Enterprise State Roaming in Azure AD

• configure sync settings

• implement Folder Redirection, including OneDrive


Manage and protect devices (20-25%)

Manage Windows Defender

• implement and manage Windows Defender Application Guard

• implement and manage Windows Defender Credential Guard

• implement and manage Windows Defender Exploit Guard

• implement Microsoft Defender Advanced Threat Protection

• integrate Windows Defender Application Control

• manage Windows Defender Antivirus


Manage Intune device enrollment and inventory

• configure enrollment settings

• configure Intune automatic enrollment

• enable device enrollment

• enroll non-Windows devices

• enroll Windows devices

• generate custom device inventory reports Review device inventory


Monitor devices

• monitor device health (e.g., log analytics, Windows Analytics, or other cloud-based tools,etc.)

• monitor device security


Manage apps and data (10-15%)

Deploy and update applications

• assign apps to groups

• deploy apps by using Intune

• deploy apps by using Microsoft Store for Business

• deploy O365 ProPlus

• enable sideloading of apps into images

• gather Office readiness data

• configure and implement kiosk (assigned access) or public devices


Implement Mobile Application Management (MAM)

• implement MAM policies

• manage MAM policies

• plan MAM

• configure Windows Information Protection

• implement Azure Information Protection templates

• securing data by using Intune