MD-102 Manage applications Practice Test 10 — 15 Questions

Question 1

Your organization uses Microsoft Intune to manage Windows devices. You deploy a required Win32 app that installs a line-of-business client. Users report the app installs successfully but launches with an error stating a component is missing. You confirm the component is installed by a separate Win32 app already deployed as required to the same devices. You need to ensure the dependency is present before the client app installs, without reinstalling the dependency on every device. What should you do?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Add the dependency app as an auto-install dependency in the client app's properties. Win32 app dependencies in Intune come in two flavors: auto-install and required. Auto-install checks the dependency's detection rule and installs only when missing, which matches the need to avoid redundant installs while guaranteeing the component exists before the client app runs. Required dependencies always install, and requirement rules or supersedence do not control prerequisite installation.

Answer

Add the dependency app as a required dependency in the client app's properties

Answer

Configure a requirement rule on the client app that checks for the dependency's registry key

Answer

Create a supersedence relationship where the dependency supersedes the client app

Question 2

You are an endpoint administrator for a company that uses Microsoft Intune. You deploy a Win32 app to Windows devices with a detection rule that checks for a specific file version. Some devices have an older version of the file already present from a previous manual installation. Intune reports the app as 'Installed' on those devices, but users still have the old version. You need to ensure the app installs the new version on those devices. What should you do?

Accepted Answer

Modify the detection rule to check for the new file version.. The detection rule is too permissive, matching the old file version and causing Intune to consider the app already installed. By updating the detection rule to require the new version, Intune will correctly identify the old version as not compliant and proceed with installation. This ensures the new version is deployed to all targeted devices.

Answer

Add a requirement rule that the file version must be the new version.

Answer

Change the app assignment from Required to Available.

Answer

Create a new Win32 app with the same detection rule and assign it to the same devices.

Question 3

You use Microsoft Intune to manage Windows 11 devices. You need to deploy a new Microsoft Store app (new) to a group of users and ensure the app installs without requiring users to sign in to the Store with a personal account. Which two actions should you perform? (Choose two.)

Accepted Answer

Assign the app as required to the user group.. Deploying a Microsoft Store app (new) silently requires the tenant-level Store integration so Intune can act on the organization's behalf, plus a required assignment that pushes the app automatically. Together these remove the need for users to authenticate to the Store with personal accounts. System-context toggles, LOB uploads, and Store lockdowns are unrelated to this outcome.

Answer

Upload the .appx package to Intune as a line-of-business app.

Answer

Create a configuration profile that disables the Microsoft Store for all users.

Answer

Configure the app to install in system context.

Question 4

A company uses Microsoft Intune to manage Windows 10 devices. They need to deploy a required Win32 app to a group of devices that are often offline and connect to the network only intermittently. The app package is 2 GB. Users report that the app installation takes a long time and sometimes fails. You need to reduce the download time and improve reliability. What should you configure?

Accepted Answer

Delivery Optimization. Delivery Optimization enables peer-to-peer sharing of Intune Win32 app content, which reduces download time and improves reliability for large packages. It is the appropriate Intune feature to configure for devices that are intermittently connected. The other options either do not apply to Intune app delivery or require additional infrastructure.

Answer

Delivery Optimization with Microsoft Connected Cache

Answer

Windows Update for Business

Answer

Microsoft Connected Cache

Question 5

Your company uses Microsoft Intune to manage Windows devices. You deploy Microsoft 365 Apps as a required app. Users report that after installation, Outlook shows a first-run prompt asking for a license, and some users cannot activate. You need to ensure activation happens automatically using the user's existing Microsoft 365 credentials. What should you configure in the Microsoft 365 Apps app properties?

Accepted Answer

Enable the option to automatically accept the Microsoft 365 Apps license agreement and use the user's credentials for activation. The Microsoft 365 Apps app in Intune includes settings for activation. Enabling automatic license agreement acceptance and using the user's credentials allows Office to activate silently with the existing Microsoft 365 account, eliminating first-run prompts. User activation still prompts, device activation uses device licensing, and app configuration policies do not handle activation tokens.

Answer

Deploy a separate app configuration policy that sets the Office activation token

Answer

Set the activation type to User activation

Answer

Set the activation type to Device activation

Question 6

An organization uses Microsoft Intune for Windows 10 device management. They need to deploy a custom Windows app (.exe) to kiosk devices. The app requires admin privileges to install, and the devices are shared. Which deployment method should be used?

Accepted Answer

Use a Win32 app with install context set to 'system'.. Win32 apps in Microsoft Intune can be configured with the install context set to 'system', which grants the necessary admin privileges for installation and ensures the app is installed for all users on shared kiosk devices. This method uses the Intune Management Extension to run the installer with SYSTEM account privileges, bypassing user-level restrictions and supporting per-machine installations.

Answer

Assign the app as 'available' for user-install.

Answer

Deploy as a line-of-business app with device context.

Answer

Package as a Microsoft Store for Business app.

Question 7

You manage a fleet of Android Enterprise devices. You need to ensure that only approved apps from the managed Play Store can be installed. What configuration should you enable?

Accepted Answer

Configure a device restriction policy to allow only managed Google Play apps.. A device restriction policy in Microsoft Intune allows you to restrict app installation to only the managed Google Play store. By configuring the 'Allow only managed Google Play apps' setting, you ensure that users cannot install apps from unapproved sources, effectively controlling the app ecosystem on Android Enterprise devices.

Answer

Set the device to 'Fully managed' and disable unknown sources.

Answer

Deploy an app configuration policy that blocks sideloading.

Answer

Use a compliance policy to block non-compliant apps.

Question 8

A company uses Microsoft Intune to manage Windows 10 devices. Users report that a LOB app deployed as a required install fails to install on some devices. The app is configured with a dependency on another app. What should the administrator verify first?

Accepted Answer

Check if the dependency app is assigned and installed successfully. When a required LOB app fails to install, the most common cause is that its dependency app is not present or not successfully installed on the target device. Intune enforces dependency apps to be installed before the parent app, and if the dependency is missing or failed, the parent app installation will not proceed. The administrator should first verify that the dependency app is assigned to the same device groups and has a successful installation status.

Answer

Ensure the devices have internet connectivity

Answer

Verify that the app is signed with a trusted certificate

Answer

Recreate the deployment policy

Question 9

An organization is moving from on-premises SCCM to Microsoft Intune for Windows app management. They need to ensure that users can self-install company portal apps without administrator intervention. Which configuration is required?

Accepted Answer

Assign the app to users as 'Available' in the Company Portal. The 'Available' assignment type in Microsoft Intune allows users to install apps on demand from the Company Portal without requiring administrator intervention. This configuration meets the requirement for self-service installation while respecting user intent, as opposed to forced installations.

Answer

Configure the app as 'Required' for all users

Answer

Add the app to the Windows Autopilot deployment profile

Answer

Grant users local administrator rights on their devices

Question 10

An administrator deploys a Win32 app via Intune with detection rule 'File exists: C:\Program Files\MyApp\app.exe'. The app is reported as installed, but users cannot launch it. The file exists but is corrupted. How should the administrator modify the detection rule to ensure the app is correctly detected and re-installed if corrupted?

Accepted Answer

Use a custom detection script that validates the file hash or signature. A custom detection script can verify the file's integrity by checking its hash or digital signature, ensuring that even if the file exists, it is not corrupted. Intune's built-in detection rules only check for file existence or version, not file integrity. By using a script that validates the hash, the administrator can force a reinstall when the file is corrupted, as the detection will fail.

Answer

Remove the detection rule so Intune always re-installs the app

Answer

Add a registry detection rule for the app's uninstall key

Answer

Change detection rule to 'File version comparison' and set minimum version

Question 11

An administrator is troubleshooting why a Win32 app is repeatedly installed on a device. The exhibit shows a log snippet. What is the most likely cause of the repeated installation?

Accepted Answer

The app writes the detection file to a temporary folder that is cleaned periodically. If the Win32 app's detection file is written to a temporary folder (e.g., %TEMP% or C:\Windows\Temp) that is periodically cleaned by disk cleanup policies or the Storage Sense feature, Intune will no longer detect the app as installed after the file is removed. This causes the Microsoft Intune Management Extension to re-run the installation on the next sync cycle, leading to a repeated installation loop. The detection rule relies on the persistent presence of the file, so its removal triggers reinstallation.

Answer

The app requires a reboot to complete installation

Answer

The detection rule runs before the install completes

Answer

The exit code 0 is misinterpreted as failure

Question 12

An Android device running OS version 9.0 with app version 1.5.0 is targeted by the app protection policy in the exhibit. What is the expected behavior when the user tries to access work data?

Accepted Answer

Access is allowed without any warning because minimum requirements are met. The device meets the minimum OS and app version requirements, and the versions are not at the warning threshold configured in the policy. Therefore, access is allowed without any warning.

Answer

Access is blocked because the OS version is below the warning level

Answer

Access is allowed with a warning to update the app and OS

Answer

Access is blocked because the app version is below the warning level

Question 13

A company uses Microsoft Intune to manage Windows 10 devices. Users report that some required line-of-business (LOB) apps are not being installed on their devices. The apps are assigned as 'Required' to a device group that includes the affected devices. Which two actions should the administrator take to troubleshoot the issue? (Choose two.)

Accepted Answer

Review the Intune Management Extension logs on a device for installation errors.. The Intune Management Extension (IME) is the component responsible for deploying Win32 and line-of-business (LOB) apps on Windows 10 devices. Reviewing its logs (located in %ProgramData%\Microsoft\IntuneManagementExtension\Logs) provides detailed error messages, such as download failures, dependency issues, or script execution errors, which directly indicate why a required app failed to install.

Answer

Uninstall the app from the affected devices and reassign it as Required.

Answer

Reassign the app to the device group with a different assignment type.

Answer

Run gpresult /r on a device to confirm the app assignment policy is applied.

Question 14

A company uses Microsoft Intune to manage Windows 10 devices. They need to deploy Microsoft 365 Apps for enterprise to 500 devices. The devices are in a hybrid Azure AD joined configuration. The administrator wants to use Intune to deploy the apps. Which deployment method should the administrator use?

Accepted Answer

Add a 'Microsoft 365 Apps for Windows 10 and later' app in Intune and assign it to the devices.. Intune provides a built-in 'Microsoft 365 Apps for Windows 10 and later' app type that is specifically designed to deploy and manage Microsoft 365 Apps for enterprise. This method uses Intune's native integration with the Office Content Delivery Network (CDN) to download and install the latest version of Office, and it supports hybrid Microsoft Entra ID joined devices without requiring additional tools or configuration files.

Answer

Use the Office Deployment Tool (ODT) to create a configuration file and deploy via Intune as a Win32 app.

Answer

Use Group Policy to deploy the Office 2019 suite.

Answer

Upload the Office installation files as a line-of-business (LOB) app.

Question 15

Contoso Ltd. is a financial services company with 2,000 users. They use Microsoft Intune to manage Windows 10 devices. The company has a strict security policy that requires all devices to have a specific set of security applications installed: an antivirus (AV) app, a disk encryption app, and a VPN client. These apps are all line-of-business (LOB) Win32 apps packaged as .intunewin files. The administrator created a Win32 app for each and assigned them as 'Required' to all devices. After the deployment, the administrator notices that the apps are not installing on approximately 10% of devices. The devices are online and have connectivity. The Intune Management Extension is running. When the administrator checks the Intune Management Extension logs on a failing device, they see the following error: 'Failed to download content. Error: 0x80070002 - The system cannot find the file specified.' What is the most likely cause?

Accepted Answer

The content for the Win32 app was not uploaded correctly or is missing from Intune.. The error 0x80070002 ('The system cannot find the file specified') in the Intune Management Extension logs indicates that the client is attempting to download the Win32 app content from Intune, but the content blob is missing or inaccessible. This typically occurs when the .intunewin file was not uploaded correctly, the upload was interrupted, or the content was deleted from Intune after assignment. Since the extension is running and connectivity is confirmed, the issue is server-side content availability, not client-side permissions or detection logic.

Answer

The Intune Management Extension does not have permission to install apps on those devices.

Answer

The user is not logged in, so the app cannot be installed.

Answer

The app detection rules do not match the installed version.