Question 1mediummultiple choice
Read the full Manage applications explanation →MD-102 Manage applications • Complete Question Bank
Complete MD-102 Manage applications question bank — all 0 questions with answers and detailed explanations.
Refer to the exhibit. Intune Management Extension log: [Win32App][Detection] Running detection script for app 'AdobeReader' with script path: C:\Program Files (x86)\Microsoft Intune Management Extension\Scripts\detect_AdobeReader.ps1 [Win32App][Detection] Detection script returned exit code 0. [Win32App][Detection] Detection script wrote to stdout: 'Installed' [Win32App][Detection] App 'AdobeReader' is detected as installed. [Win32App][Enforcement] App 'AdobeReader' is already installed. Skipping enforcement.
Refer to the exhibit.
Intune app protection policy JSON:
{
"enforcementLevel": "block",
"appSharingPolicy": "allowNone",
"dataTransferPolicy": "allowNone",
"allowSaveAs": false,
"allowCutCopy": false,
"allowCamera": false,
"allowContactsSync": false,
"allowPrint": false,
"allowScreenshots": false,
"requireBiometric": true,
"requirePin": true,
"pinLength": 4
}Refer to the exhibit. Intune Management Extension log snippet: ``` [Win32AppDetection] App 'MyApp' detection failed. Detection rule: File exists C:\Program Files\MyApp\app.exe. File not found. [Win32AppInstall] Installing app 'MyApp'... [Win32AppInstall] Installation completed with exit code 0. [Win32AppDetection] App 'MyApp' detection succeeded. ```
Refer to the exhibit.
Intune app protection policy JSON:
```json
{
"AppProtectionPolicy": {
"@odata.type": "#microsoft.graph.androidManagedAppProtection",
"displayName": "Android Policy",
"description": "Policy for Android devices",
"periodOfflineBeforeAccessCheck": "PT12H",
"periodOnlineBeforeAccessCheck": "PT30M",
"allowedDataStorageLocations": ["sharePoint", "oneDriveForBusiness"],
"exemptedAppPackages": [],
"minimumRequiredAppVersion": "1.0.0",
"minimumRequiredOSVersion": "9.0",
"minimumWarningAppVersion": "2.0.0",
"minimumWarningOSVersion": "10.0",
"appDataEncryptionType": "whenDeviceLocked",
"managedBrowser": "microsoftEdge",
"deployedAppCount": 2
}
}
```Refer to the exhibit. The following is an Intune app protection policy JSON snippet:
{
"@odata.type": "#microsoft.graph.androidManagedAppProtection",
"displayName": "Android App Protection",
"description": "Protects company data on Android devices",
"appSharingFromLevel": "policyManagedApps",
"appSharingToLevel": "policyManagedApps",
"dataTransferToUnmanagedApps": false,
"encryptAppData": true,
"requirePin": true,
"pinRequiredInsteadOfBiometricTimeout": 60,
"minimumPinLength": 4,
"disableAppEncryptionIfDeviceEncryptionIsEnabled": false,
"managedBrowser": "microsoftEdge"
}Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag steps to the numbered slots on the right, or tap a step then tap a slot.
Drag a concept onto its matching description — or click a concept then click the description.
Control settings like password, camera, and Bluetooth
Define rules for device health and security
Deploy custom OMA-URI or Apple Configurator settings
Configure Windows Defender Firewall and BitLocker
Group Policy-like settings for Windows devices
Drag a concept onto its matching description — or click a concept then click the description.
Define deferral, pause, and deadline policies
Deploy major Windows version upgrades
Deploy monthly security and cumulative updates
Approve and deploy driver and firmware updates
Force immediate installation of critical updates
{
"AppLockerPolicy Version="1" xmlns="http://schemas.microsoft.com/AppLocker/2008/V1">
<RuleCollection Type="Exe" EnforcementMode="AuditOnly">
<FilePublisherRule Id="..." Name="Microsoft signed apps" Description="Allow" UserOrGroupSid="S-1-1-0">
<Conditions>
<FilePublisherCondition PublisherName="*" ProductName="*" BinaryName="*">
<BinaryVersionRange LowSection="*" HighSection="*" />
</FilePublisherCondition>
</Conditions>
</FilePublisherRule>
</RuleCollection>
</AppLockerPolicy>{
"@odata.type": "#microsoft.graph.windowsManagedDevice",
"id": "12345",
"deviceName": "DESKTOP-ABC",
"managedDeviceOwnerType": "company",
"enrollmentType": "windowsMDM",
"complianceState": "compliant",
"applications": [
{
"appId": "app1",
"appVersion": "1.0.0.0",
"installState": "installed"
},
{
"appId": "app2",
"appVersion": "2.0.0.0",
"installState": "failed"
}
]
}{
"resources": [
{
"type": "Microsoft.Intune/configurationPolicies",
"name": "macOS_AppPolicy",
"properties": {
"platforms": "macOS",
"technologies": "mdm",
"settings": [
{
"settingInstance": {
"settingDefinitionId": "com.apple.ManagedClient.appstore",
"settingValue": {
"value": "true"
}
}
}
]
}
}
]
}Refer to the exhibit.
```json
{
"@odata.type": "#microsoft.graph.windowsMobileMSI",
"displayName": "ContosoApp",
"publisher": "Contoso",
"version": "1.0.0.0",
"productCode": "{12345678-1234-1234-1234-123456789012}",
"productVersion": "1.0.0.0",
"installExperience": "system",
"deviceRestartBehavior": "suppress",
"useDeviceContext": true
}
```Refer to the exhibit.
```json
{
"@odata.type": "#microsoft.graph.managedIOSLobApp",
"displayName": "ContosoSales",
"version": "2.0.0",
"bundleId": "com.contoso.sales",
"buildNumber": "2.0.0",
"expirationDateTime": "2025-12-31T23:59:59Z",
"versionNumber": "2.0.0",
"minimumSupportedOperatingSystem": {
"v14_0": true
},
"applicableDeviceType": {
"iPad": true,
"iPhoneAndIPod": true
}
}
```{
"powershell": "Get-IntuneApp | Where-Object {$_.'@odata.type' -eq '#microsoft.graph.win32LobApp'} | Select-Object -Property displayName, installExperience, detectionRules"
}{
"json": {
"@odata.type": "#microsoft.graph.windowsUpdateForBusinessConfiguration",
"featureUpdateVersion": "Windows 10, version 22H2",
"qualityUpdateDeferralPeriodInDays": 7,
"featureUpdateDeferralPeriodInDays": 30,
"qualityUpdatePause": false,
"featureUpdatePause": false,
"updateNotificationLevel": "defaultNotifications"
}
}{
"kql": "DeviceAppHealth | where DeviceName == 'WIN10-PC' | where Timestamp > ago(1d) | project AppName, AppVersion, InstallationResult, ErrorCode"
}Refer to the exhibit.
```json
{
"@odata.type": "#microsoft.graph.win32LobApp",
"displayName": "FinanceApp",
"installExperience": "system",
"detectionRules": [
{
"@odata.type": "#microsoft.graph.win32LobAppFileSystemDetection",
"path": "C:\\Program Files\\FinanceApp",
"fileOrFolderName": "finance.exe",
"detectionType": "exists",
"check32BitOn64System": false
}
],
"requirementRules": [
{
"@odata.type": "#microsoft.graph.win32LobAppRequirement",
"operator": "greaterThanOrEqual",
"detectionValue": "10.0.16299",
"requirementType": "minimumWindowsRelease"
}
],
"installCommandLine": "setup.exe /quiet",
"uninstallCommandLine": "setup.exe /uninstall /quiet"
}
```Refer to the exhibit.
```powershell
$app = Get-IntuneMobileApp -AppId "12345678-1234-1234-1234-123456789012"
$app.assignment | Format-List
```
Output:
```
intent : required
target : @{@odata.type=#microsoft.graph.allDevicesAssignmentTarget}
```Refer to the exhibit.
```json
{
"@odata.type": "#microsoft.graph.iosLobApp",
"displayName": "SalesApp",
"bundleId": "com.contoso.sales",
"appVersion": "1.0.0",
"buildNumber": "1",
"applicableDeviceType": {
"iPad": true,
"iPhoneAndIPod": false
}
}
```{
"displayName": "Win32 App Deployment",
"installExperience": "system",
"deviceRestartBehavior": "suppress",
"returnCodes": [
{"returnCode": 0, "type": "success"},
{"returnCode": 1641, "type": "success"},
{"returnCode": 3010, "type": "softReboot"}
]
}Get-WinEvent -LogName Microsoft-Windows-IntuneManagementExtension/Admin | Where-Object { $_.Id -eq 1001 }{
"@odata.type": "#microsoft.graph.windowsStoreApp",
"displayName": "Microsoft Teams",
"appStoreUrl": "ms-windows-store://pdp/?productid=9MSPC6MP8FM4",
"installExperience": "system",
"packageIdentityName": "Microsoft.Teams_8wekyb3d8bbwe"
}Refer to the exhibit.
{
"displayName": "App Protection Policy - iOS",
"appGroupType": "allApps",
"settings": {
"ios": {
"dataProtection": {
"allowBackup": "block",
"allowDataSync": "block",
"allowScreenCapture": "block"
},
"accessRequirements": {
"pin": {
"pinLength": 6,
"pinType": "numeric"
},
"biometric": {
"fingerprint": "allow",
"faceId": "allow"
},
"timeout": 5
}
}
}
}Refer to the exhibit.
```
Get-IntuneWin32App -Name "CompanyPortal" | Select-Object -Property Name, InstallExperience, DeviceRestartBehavior, DetectionRules
```
Output:
Name : CompanyPortal
InstallExperience : system
DeviceRestartBehavior : allow
DetectionRules : @{ruleType=manual; detectionType=file; path=C:\Program Files\CompanyPortal; fileOrFolderName=CompanyPortal.exe; check32BitOn64System=False}Refer to the exhibit.
```
{
"@odata.type": "#microsoft.graph.windows10CompliancePolicy",
"passwordRequired": true,
"passwordMinimumLength": 6,
"passwordRequiredType": "alphanumeric",
"passwordMinutesOfInactivityBeforeLock": 5,
"osMinimumVersion": "10.0.19041",
"osMaximumVersion": "10.0.22621"
}
```{
"@odata.type": "#microsoft.graph.win32LobApp",
"installExperience": {
"runAsAccount": "user"
},
"detectionRules": [
{
"@odata.type": "#microsoft.graph.win32LobAppRegistryDetection",
"check32BitOn64System": false,
"keyPath": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{12345678-1234-1234-1234-123456789012}",
"valueName": "DisplayName",
"detectionType": "exists"
}
]
}Refer to the exhibit.
{
"displayName": "Windows App Protection Policy",
"description": "Protection policy for managed apps",
"version": "1.0",
"enforcementLevel": 2,
"appGroupType": "All apps",
"settings": {
"dataTransfer": {
"orgRestriction": true,
"cutCopyAllowed": false,
"pasteAllowed": false
},
"encryption": {
"encryptAppData": true
},
"pin": {
"minLength": 4,
"requirePin": true
}
}
}Refer to the exhibit.
{
"displayName": "Microsoft 365 Apps for Windows 10",
"appVersion": "16.0.14026.20246",
"installCommand": "setup.exe /configure configuration.xml",
"uninstallCommand": "setup.exe /configure uninstall.xml",
"detectionRules": [
{
"@odata.type": "#microsoft.graph.win32LobAppRegistryDetection",
"check32BitOn64System": false,
"keyPath": "HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Office\\16.0\\Common\\InstallRoot",
"valueName": "Path",
"detectionType": "exists"
}
]
}Your organization has 500 Windows 11 devices managed by Microsoft Intune. You need to deploy a third-party Win32 application (AppDeploy.exe) that requires the user to accept an end-user license agreement (EULA) during installation. The app must be installed silently without user interaction. You have created a custom script that accepts the EULA automatically. The app is packaged as an .intunewin file. You need to configure the deployment in Intune.
The installation command must run the script that accepts the EULA and then launches the installer. The detection rule must check for the presence of a specific file (C:\Program Files\AppDeploy\app.exe). You want to ensure that if the installation fails, Intune retries automatically.
Which of the following configurations should you choose?
You are the Intune administrator for a company that uses Microsoft Entra ID (Azure AD) for identity. You have a line-of-business (LOB) iOS app that is distributed via Intune using volume purchase program (VPP) tokens. The app requires a configuration policy to set the server URL. You have assigned the app as 'Required' to all users in the 'Sales' group. Some users report that the app does not show the configured server URL.
You verify that the app configuration policy is assigned to the same 'Sales' group. The app installs successfully. You check the Intune console and see that the app configuration policy has a status of 'Pending' for some devices. The devices are company-owned iPhones running iOS 16.
What is the most likely cause of the configuration not applying?
Your company uses Microsoft Intune to manage Windows 10 devices. You need to deploy a Microsoft Store app (new) named 'Company Portal' to all devices. The app is already added to Intune. You want to ensure that the app is automatically installed on devices that are not yet enrolled in Intune.
You assign the app to the 'All devices' group with the intent 'Required'. However, you notice that devices that enroll after the assignment do not receive the app automatically.
What should you do to ensure that the app installs on newly enrolled devices?
Your organization uses Intune to manage Windows 10 devices. You have deployed a Win32 app named 'FinanceApp' with a detection rule that checks for the existence of a registry key. After deployment, you find that the app is not being detected on some devices, causing Intune to attempt reinstallation. You suspect the detection rule is incorrect.
You need to update the detection rule for the app without redeploying the entire app. You edit the app properties in Intune and modify the detection rule. However, after saving, the existing assignments still use the old detection rule.
What should you do to apply the updated detection rule to existing devices?