MD-102 Practice Test 29 — 15 Questions

Question 1

Refer to the exhibit. You are deploying a custom OMA-URI policy to Windows 10 devices. What is the effect of this policy?

Accepted Answer

Device telemetry is set to enhanced.. Option A is correct. The OMA-URI for AllowTelemetry set to 2 enables diagnostic data at the enhanced level. Option B is wrong because Cortana is disabled (value 0). Option C is wrong because neither setting relates to Windows Update. Option D is wrong because the policy does not disable Windows Defender.

Answer

Windows Update is configured to defer updates.

Answer

Windows Defender is disabled.

Answer

Cortana is enabled.

Question 2

Which TWO actions should you take to ensure that only healthy Windows 10/11 devices can access Microsoft 365 services? (Choose two.)

Accepted Answer

Create a device compliance policy that includes health attestation checks. Options B and D are correct: Device compliance policy defines health requirements; Conditional Access enforces compliance. Option A (Intune enrollment) is a prerequisite but not an access control. Option C (App protection policy) protects data, not device health. Option E (Autopilot) is for provisioning.

Answer

Configure Intune enrollment

Answer

Use Windows Autopilot to pre-provision devices

Answer

Deploy an app protection policy to M365 apps

Question 3

A user reports that their iOS device is not receiving email on their work account. The device is enrolled in Intune. You verify that the Exchange ActiveSync profile is assigned correctly. What should you check next?

Accepted Answer

Check the device's compliance status in Intune.. Option A is correct because if the device is marked as noncompliant (e.g., due to noncompliant app or OS), Conditional Access will block email access even if the profile is present. Option B is wrong because if the device is compliant, the profile is applied. Option C is wrong because MDM authority is typically set correctly. Option D is wrong because an app protection policy is for MAM, not for email access via native mail app.

Answer

Ensure the MDM authority is set to Intune.

Answer

Check if an app protection policy is assigned to the user.

Answer

Verify that the device is enrolled in device enrollment manager mode.

Question 4

You are deploying a new line-of-business (LOB) app to Windows 10 devices managed by Microsoft Intune. The app requires a specific registry key to be set before installation. What is the best approach to ensure the registry key is applied before the app installs?

Accepted Answer

Define a requirement rule in the Win32 app that checks for the registry key; if missing, use a proactive remediation script to create it.. Option C is correct because Win32 app detection rules can include registry checks, and using a requirement rule (e.g., registry key exists) ensures the app installs only after the key is present. Option A is wrong because app configuration policies don't apply before installation. Option B is wrong because PowerShell scripts can run during installation but not as a prerequisite. Option D is wrong because compliance policies are for device state, not pre-installation steps.

Answer

Create a compliance policy that requires the registry key and mark the app as required.

Answer

Use a device configuration policy to set the registry key, then assign the app as available.

Answer

Include a PowerShell script in the app's installation command that sets the registry key before the main installer runs.

Question 5

You are deploying a Win32 app via Intune that requires .NET Framework 4.8 as a dependency. Which THREE steps must you perform to ensure the dependency is installed before the app?

Accepted Answer

In the main app's properties, add a dependency and select the .NET Framework app.. Option A, Option C, and Option D are correct. You need to add the dependency app in Intune, set the dependency for the main app, and configure auto-install for the dependency. Option B is wrong because detection rules are for the main app, not dependency order. Option E is wrong because supercedence is for replacement, not dependencies.

Answer

Configure a detection rule for .NET Framework in the main app.

Answer

Create a supersedence relationship where the .NET Framework app supersedes the main app.

Question 6

Your organization uses Microsoft Intune to manage Android devices. You need to deploy an app that is available in the Managed Google Play store as a required app. What must you do first?

Accepted Answer

Connect Intune to the Managed Google Play store.. To deploy apps from Managed Google Play, you must first connect your Intune tenant to Managed Google Play. Option D is correct. Option A is wrong because you do not need to enroll each device individually for app deployment. Option B is wrong because the Managed Google Play app is pre-installed on Android Enterprise devices. Option C is wrong because the app is in the store, so you do not need to upload it.

Answer

Enroll the device in Intune.

Answer

Install the Managed Google Play app on the device.

Answer

Upload the app package to Intune.

Question 7

Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You need to deploy a Microsoft Copilot app that requires users to sign in with their work account. The app must be automatically installed without user interaction. What should you do?

Accepted Answer

Purchase the app through Apple Business Manager and assign it as a required app in Intune.. VPP apps can be assigned as required and installed silently if device is supervised. Option B is incorrect because Company Portal requires user to initiate. Option C is incorrect because APP does not install apps. Option D is incorrect because web clip is not the app.

Answer

Configure a web clip that links to the app in the App Store.

Answer

Create an Intune App Protection Policy for the app.

Answer

Add the app as a line-of-business app and deploy via Company Portal.

Question 8

Contoso uses Intune to manage iOS/iPadOS devices. You need to ensure that only approved apps from the Microsoft Store can be installed on corporate devices. What should you configure?

Accepted Answer

Managed App Policies (MAM). App Protection Policies (APP) are for data protection on managed apps, not app installation restrictions. Device Compliance policies enforce compliance, not app control. iOS/iPadOS App Config policies provide configuration, not restrictions. Managed App Policies (MAM) are for app protection. Option B is correct because Managed App Policies can restrict app installation to approved apps.

Answer

App Protection Policies (APP)

Answer

Device Compliance policies

Answer

iOS/iPadOS App Configuration policies

Question 9

Which TWO of the following are methods to deploy apps to Windows 10/11 devices via Microsoft Intune?

Accepted Answer

Microsoft Store app. Win32 app and Microsoft Store app are supported deployment methods. Web link is not an app type. iOS and Android are for other platforms.

Answer

iOS app

Answer

Web link

Answer

Android app

Question 10

Your organization uses Microsoft Intune to manage Windows 10 devices. They deploy a Win32 app using detection rules. The app installs but the detection rule incorrectly reports failure, causing repeated installation attempts. What is the best way to resolve this?

Accepted Answer

Update the detection rule to accurately reflect installed state. Updating the detection rule to accurately detect installation will prevent repeated attempts. Reinstalling may cause issues. Modifying the install command may not fix detection. Uninstalling and redeploying is unnecessary.

Answer

Uninstall and redeploy the app

Answer

Reinstall the app manually

Answer

Modify the installation command to suppress output

Question 11

Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You need to deploy a VPP (Volume Purchase Program) app that is already purchased and assigned to your tenant. What is the minimum configuration required to make the app available to users?

Accepted Answer

Sync the VPP token, then add the app from the store and assign it.. Option B is correct because VPP apps require a token to be synced with Intune, and then the app can be assigned as required or available. Option A is wrong because app configuration policies are optional. Option C is wrong because device enrollment restrictions don't affect app assignment. Option D is wrong because company portal is used for available apps but not strictly required for required installs.

Answer

Configure a device enrollment restriction to allow the app.

Answer

Distribute the app via the Company Portal without any additional configuration.

Answer

Upload the app IPA file to Intune, then create an app configuration policy.

Question 12

You are configuring a Microsoft Intune app configuration policy for a managed iOS app. Which THREE types of settings can you include in the policy?

Accepted Answer

Permissions such as location or camera. Option A, Option B, and Option D are correct. App configuration policies can include configuration settings (key-value pairs), connection strings, and permissions. Option C is wrong because compliance rules are in compliance policies. Option E is wrong because network requirements are in device configuration.

Answer

Compliance rules for the app

Answer

Network requirements like VPN

Question 13

Which TWO actions are required to deploy a Win32 app using Microsoft Intune? (Choose two.)

Accepted Answer

Upload the .intunewin package file.. To deploy a Win32 app, you must upload the .intunewin file (which contains the installation files) and configure detection rules (to determine if the app is installed). Options A and C are correct. Option B is wrong because the app is not from the store. Option D is wrong because Managed Google Play is for Android. Option E is wrong because macOS signing is not required for Windows apps.

Answer

Connect to Managed Google Play.

Answer

Assign a Microsoft Store license.

Answer

Sign the app with a macOS developer certificate.

Question 14

You manage a fleet of Windows 10 devices with Microsoft Intune. You need to deploy a Win32 app that has a complex installation requiring multiple command-line parameters. The app must be available to users in the Company Portal. What is the best way to handle the installation parameters?

Accepted Answer

Use the Intune Win32 app packaging to specify the installation command with parameters.. Intune Win32 app deployment allows specifying installation command and parameters in the app package. Option B is incorrect because detection rules do not install. Option C is incorrect because PowerShell scripts can be included but not as separate assignment. Option D is incorrect because administrative templates configure settings, not install apps.

Answer

Deploy a PowerShell script via Intune that runs the installer with parameters.

Answer

Configure detection rules to run a script that passes parameters.

Answer

Use an administrative template to set parameters before installing.

Question 15

You are troubleshooting a Microsoft 365 Apps for enterprise deployment on Windows 10 devices managed by Intune. Users report that the apps are not installing, but the deployment status in Intune shows 'Success' for some devices and 'Failed' for others. On a failing device, you discover that the Office Deployment Tool (ODT) logs indicate '0x80070005 - Access denied'. What is the most likely cause?

Accepted Answer

The Office Deployment Tool is running in user context instead of system context.. Option D is correct because the ODT requires administrative privileges to install Office. If the installation context is user-level, access denied occurs. Option A is wrong because network issues typically give different error codes. Option B is wrong because configuration.xml syntax errors cause different errors. Option C is wrong because disk space errors are different.

Answer

The device has insufficient disk space for the installation.

Answer

The configuration.xml file has an invalid Channel attribute.

Answer

The device does not have internet connectivity to download Office installation files.

MD-102 Practice Test 29 — 15 Questions

Exhibit

MD-102 Practice Test 29 — 15 Questions

Exhibit