MD-102 Practice Test 31 — 15 Questions

Question 1

You are deploying a line-of-business (LOB) app to iOS devices using Microsoft Intune. The app is signed with an enterprise certificate. Users report that the app installs but crashes immediately on launch. What is the most likely cause?

Accepted Answer

The enterprise developer certificate is not trusted on the device.. If the app is not trusted (developer not manually trusted on device), iOS will block launch. Option A is incorrect because the app is signed with enterprise cert. Option C is irrelevant. Option D is possible but trust is more common first step.

Answer

The Intune company portal app is not installed.

Answer

The app is not signed.

Answer

The app requires a VPN connection.

Question 2

Which TWO of the following are benefits of using Microsoft Intune to manage applications on mobile devices?

Accepted Answer

Ability to deploy apps to devices without requiring sideloading.. Intune allows deploying apps without sideloading and can selectively wipe corporate data. Option C is incorrect because Intune does not provide local backup. Option D is incorrect because Intune manages app installation, not just compliance. Option E is incorrect because device-based licensing is not a primary benefit.

Answer

Enforcement of device compliance before app installation.

Answer

Support for user-based licensing only.

Answer

Automatic backup of app data to the cloud.

Question 3

You need to enable users to install company apps from a private store on their iOS devices. Which Microsoft Intune feature should you use?

Accepted Answer

Volume Purchase Program (VPP). Volume Purchase Program (VPP) allows distribution of purchased apps. Option A is correct. Option B is wrong because Company Portal is the client, not the feature. Option C is wrong because MAM policies are for data protection. Option D is wrong because certificate profiles are for authentication.

Answer

Mobile Application Management (MAM) policies

Answer

Certificate profiles

Answer

Company Portal app

Question 4

An organization uses Microsoft Intune to manage iOS devices. They need to deploy an internal line-of-business (LOB) app that is signed with an enterprise certificate. The app must be available to users who are members of a dynamic Microsoft Entra ID group. Which deployment method should you use?

Accepted Answer

Assign the LOB app as 'Available' to the dynamic group. Assigning the app to the dynamic group as an available deployment will make it visible in the Company Portal. Required deployment forces installation, not ideal. A volume purchase program (VPP) is for store apps. Managed open-in is a data protection feature.

Answer

Use a VPP token to deploy the app

Answer

Configure a managed open-in policy

Answer

Assign the LOB app as 'Required' to the dynamic group

Question 5

Refer to the exhibit. A KQL query is run in Microsoft Defender XDR for a device 'WIN10-PC'. The results show that a critical line-of-business app 'ContosoApp' version '2.0.0' has InstallationResult 'Failed' with ErrorCode '0x80073CF6'. What does this error code typically indicate?

Accepted Answer

The app package is not signed correctly. Error 0x80073CF6 is an app installation error that often indicates a signature or package issue, or that the app requires a newer OS version. It is not a network error or disk space error.

Answer

The device does not have internet connectivity

Answer

The user does not have permission to install apps

Answer

The device has insufficient disk space

Question 6

Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to deploy a managed Google Play app to a device. The app appears in the managed Google Play store but the deployment status shows 'Failed'. What is the most likely cause?

Accepted Answer

The device is enrolled in a personally-owned work profile.. Option C is correct because managed Google Play apps require that the device is enrolled in corporate-owned work profile or fully managed mode. If the device is in personally-owned work profile, some apps may fail. Option A is wrong because Google Play Services are required for all Android devices. Option B is wrong because store access is controlled by policy. Option D is wrong because the app is in the managed store.

Answer

The device is not allowed to access the managed Google Play store.

Answer

The app is not approved in the managed Google Play store.

Answer

The device does not have Google Play Services installed.

Question 7

An Intune administrator needs to ensure that Windows 10 devices are compliant with security requirements. Which TWO options are valid compliance settings for Windows 10?

Accepted Answer

Require BitLocker. The correct answers are A and D. Option B is incorrect because app protection policy is not part of compliance. Option C is incorrect because device category is not a compliance setting. Option E is incorrect because device enrollment type is not a compliance setting.

Answer

Device category must be 'Corporate'

Answer

Device enrollment type must be 'Corporate'

Answer

Require app protection policy

Question 8

You are using Microsoft Intune to deploy a custom Windows app that is packaged as an .msi. The app requires a reboot after installation. You want to minimize user disruption. What is the best deployment strategy?

Accepted Answer

Assign the app as available to a device group.. Option B is correct because assigning to device as available lets users choose when to install, and they can schedule the reboot. Option A is wrong because required install may force reboot at inconvenient times. Option C is wrong because available to user still reboots immediately after install via Company Portal. Option D is wrong because deadline settings are for required installs.

Answer

Assign the app as available to a user group.

Answer

Assign the app as required to a device group.

Answer

Assign the app as required with a deadline.

Question 9

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a custom .pkg app that requires specific installation parameters. Which app type should you select?

Accepted Answer

macOS app (DMG). For macOS, custom .pkg apps are deployed using the 'macOS app (DMG)' type, which supports .pkg files embedded in a .dmg. Option D is correct. Option A is wrong because the Line-of-business app type is for iOS/iPadOS. Option B is wrong because the macOS app (PKG) type does not exist natively; .pkg is handled via DMG. Option C is wrong because the Windows app (Win32) type is for Windows only.

Answer

Line-of-business app

Answer

Windows app (Win32)

Answer

macOS app (PKG)

Question 10

A company uses Intune to manage Android Enterprise devices. The administrator wants to deploy a set of required apps silently to fully managed devices. Which THREE steps are necessary?

Accepted Answer

Create a managed Google Play account. The correct answers are A, B, and D. Option C is incorrect because user enrollment is for personally owned devices, not fully managed. Option E is incorrect because app protection policies are not required for silent app installation.

Answer

Configure a user enrollment profile

Answer

Create an app protection policy for the apps

Question 11

You need to deploy a Microsoft 365 Apps for enterprise configuration that includes Teams and Visio Pro for Microsoft 365. Users should get the full suite with both apps. What is the recommended method?

Accepted Answer

Create a Win32 app with the Office Deployment Tool and a configuration.xml that includes both products.. Option C is correct because the Office Deployment Tool and a custom configuration.xml allow you to specify products, languages, and update channels. Option A is wrong because Intune built-in Microsoft 365 Apps app allows selecting products but may not include Visio easily. Option B is wrong because manually installing is not scalable. Option D is wrong because PowerShell scripts are less reliable.

Answer

Use the built-in Microsoft 365 Apps for enterprise app type in Intune and select the products.

Answer

Instruct users to install from the Office portal.

Answer

Deploy a PowerShell script that runs Setup.exe /configure.

Question 12

You are asked to recommend a solution for deploying a web application as an icon on users' Windows 10 devices managed by Intune. Which app type should you use?

Accepted Answer

Web link. Web links in Intune create shortcuts to URLs on the device. Option B is correct. Option A is wrong because the Windows app (Win32) is for desktop applications. Option C is wrong because the Built-in app type is for system apps like Edge. Option D is wrong because the Microsoft Store app type is for store apps.

Answer

Windows app (Win32)

Answer

Microsoft Store app

Answer

Built-in app

Question 13

You use Microsoft Intune to manage Android Enterprise fully managed devices. You need to ensure that only work apps can access corporate data. Personal apps should not be able to read work data. What should you configure?

Accepted Answer

Configure an Intune App Protection Policy (APP) targeting the work apps.. Work profile on fully managed devices is not supported; Android Enterprise fully managed uses containerization via app protection policies. Option B is for personally-owned work profile. Option C is for Windows. Option D is for conditional access.

Answer

Configure Conditional Access to block personal apps.

Answer

Enable Android Enterprise work profile on the devices.

Answer

Deploy Windows Information Protection (WIP) policy.

Question 14

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to deploy a security baseline that enforces BitLocker encryption and Windows Defender Antivirus settings. What is the recommended approach?

Accepted Answer

Use the built-in Windows 10 security baseline in Intune.. Option A is correct because Microsoft Intune provides pre-built security baselines for Windows 10 that can be customized. Option B is wrong because Configuration Manager is on-premises and not the modern approach. Option C is wrong because Group Policy is not managed via Intune. Option D is wrong because PowerShell scripts are not a baseline but can be used for custom configurations.

Answer

Create a custom configuration profile using Configuration Manager.

Answer

Deploy a PowerShell script via Intune to configure the settings.

Answer

Apply Group Policy Objects from on-premises Active Directory.

Question 15

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a .pkg app that is signed by a developer certificate that is not yet trusted on the devices. What must you do to allow the installation?

Accepted Answer

Use a device configuration policy to trust the developer certificate before deploying the app.. Option B is correct because you can use a kernel extension profile to allow the developer ID, or use a custom attribute. Alternatively, you can deploy the app as a line-of-business app and use the 'Allow user to bypass' option. But the best approach is to trust the developer certificate via a configuration profile. Option A is wrong because MDM can deploy unsigned apps only if the device is supervised. Option C is wrong because user approval is not enough. Option D is wrong because the app store is not used.

Answer

Deploy the app as a line-of-business app with the 'Allow user to bypass' option enabled.

Answer

Instruct users to manually approve the installation in System Preferences.

Answer

Convert the .pkg to a .dmg and deploy via Microsoft Store for Business.