
I just updated the MD-100 guide, which really didn’t need many changes at all, but this one definitely needed a few. There have been some changes in the weightings of the different sections, the objectives have been reorganised, as well as some name changes that need to be factored in.
While limited Configuration Manager exposure was required in the original version of the exam, there’s a bit more required now because Desktop Analytics (DA) has replaced Windows Analytics (WA) in the exam, but DA can’t work standalone like WA could, so make sure you have set up the Windows and Office Deployment Lab Kit.
Deploy and Upgrade Operating Systems (25-30%)
- Plan a Windows 10 deployment
- assess infrastructure readiness
- evaluate and select appropriate deployment options (Endpoint Manager, MDT)
- plan upgrade and downgrade paths
- plan app compatibility
- plan for user state
- Plan and implement Windows 10 by using Windows Autopilot
- choose method based on requirements
- create, validate, and assign deployment profile
- extract device HW information to CSV file
- import device HW information to cloud service
- deploy Windows 10
- troubleshoot deployment
- Plan and implement Windows 10 using MDT
- choose configuration options based on requirements
- create and manage images
- deploy images (may include WDS)
- create and use task sequences
- manage application and driver deployment
- monitor and troubleshoot deployment
- Manage accounts, VPN connections, and certificates on Windows 10
- secure privileged accounts on Windows 10
- configure VPN client
- configure and manage certificates on client device
Manage Policies and Profiles (20-25%)
- Implement compliance policies for devices
- implement device compliance policies
- manage device compliance policies
- plan device compliance policies
- Configure device profiles
- implement device profiles
- manage device profiles
- plan device profiles
- control policy conflicts
- configure and implement assigned access or public devices
- Manage user profiles
- configure user profiles
- configure Enterprise State Roaming in Azure AD
- configure sync settings
Manage and Protect Devices (30-35%)
- Implement and manage device, application, and threat protection
- implement and manage Windows Defender Application Guard
- implement and manage Windows Defender Credential Guard
- implement and manage Windows Defender Exploit Guard
- plan and Implement Microsoft Defender for Endpoint for Windows 10
- integrate Windows Defender Application Control
- protect devices using Endpoint Security
- manage enterprise-level disk encryption
- implement and manage security baselines in Microsoft Intune
- Manage Microsoft Intune devices
- configure enrollment settings in Microsoft Intune
- configure Microsoft Intune automatic and bulk enrollment
- enroll non-Windows devices
- enroll Windows devices
- Review device inventory
- Monitor devices
- monitor devices using Azure Monitor and Desktop Analytics
- monitor device inventory reports using Endpoint Manger Admin Center
- Manage updates
- configure Windows 10 delivery optimization
- deploy Windows updates using Microsoft Intune
- monitor Windows 10 updates
Manage Apps and Data (10-15%)
- Deploy and update applications
- assign apps to groups
- deploy apps by using Microsoft Intune
- deploy apps by using Microsoft Store for Business/iTunes/Google Play
- deploy Microsoft 365 Apps for enterprise using Microsoft Intune
- gather Microsoft 365 Apps readiness data
- Implement Mobile Application Management (MAM)
- implement App Protection policies
- manage App Protection policies
- plan App Protection Policies
- plan and implement App Configuration Policies (Windows Information Protection)