MD-102 Manage applications Practice Test 10 — 15 Questions

Question 1

You are troubleshooting an app deployment issue. A Win32 app fails to install on some Windows 10 devices. The Intune management extension logs show error code 0x80070643. What is the most likely cause?

Accepted Answer

A pending reboot from a previous installation is blocking the install. Error 0x80070643 is a Windows Installer error that typically indicates a failed installation. The most common cause with Intune is that the app requires a reboot from a previous installation. Option C is correct.

Answer

The app package is corrupted

Answer

The device does not meet the minimum OS version requirement

Answer

The user does not have admin privileges

Question 2

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a company portal app that allows users to enroll their devices. Which app type should you use?

Accepted Answer

iOS and macOS store app. For macOS, the Company Portal app is available as a Microsoft app from the macOS App Store. In Intune, you add it as an 'iOS and macOS store app' (Mac App Store). Option B is correct.

Answer

Built-in app

Answer

Web link

Answer

macOS LOB app

Question 3

You deploy a Win32 app via Intune to Windows 10 devices. The app installs successfully on some devices but fails on others with no error in the Intune console. The app logs show 'Access Denied' during installation. What should you check first?

Accepted Answer

The installation context (user vs system) in the app deployment. If the app is configured to install in user context but requires admin privileges, it will fail. Changing to system context resolves this. Option A is correct.

Answer

The device is not Microsoft Entra ID joined

Answer

The device has insufficient disk space

Answer

The app is not signed

Question 4

You need to deploy Microsoft Edge for Business to Windows 10 devices using Microsoft Intune. Which app type should you select in the Intune portal?

Accepted Answer

Built-in app. Microsoft Edge for Business is available as a built-in app in Intune (for Windows 10). Option C is correct.

Answer

Web link

Answer

Windows app (Win32)

Answer

Microsoft 365 Apps

Question 5

Which TWO are prerequisites for deploying Win32 apps via Microsoft Intune?

Accepted Answer

The Intune management extension must be installed on devices. Win32 app deployment requires the Intune management extension and that devices are Microsoft Entra ID joined or hybrid joined. Options A and D are correct.

Answer

The app must be signed with a Microsoft certificate

Answer

Devices must have at least 4 GB of RAM

Answer

Devices must be enrolled with user affinity

Question 6

Which THREE are valid methods to deploy an app as available for users in Microsoft Intune?

Accepted Answer

Assign the app to a user group with the 'Required' setting. Available deployments can be done via Company Portal, as a required install for users, or as available for enrolled devices. Options A, B, and D are correct.

Answer

Assign the app to a device group with the 'Available' setting

Answer

Add the app to the Company Portal as a featured app without assignment

Question 7

Which TWO app types can be deployed to iOS/iPadOS devices using Microsoft Intune?

Accepted Answer

iOS LOB app. Intune supports iOS store apps and LOB apps for iOS. Option A and B are correct.

Answer

Web link

Answer

Win32 app

Answer

Android store app

Question 8

You have configured the above app protection policy for iOS. What is the effect on managed apps?

Accepted Answer

Users cannot take screenshots within managed apps. The policy blocks data sync, backup, and screen capture. It does not block printing. Option B is correct.

Answer

Users can use Face ID to unlock apps

Answer

Users can back up app data to iCloud

Answer

Users can print from managed apps

Question 9

You run the above PowerShell command. The app is installed on a device, but the detection rule checks for CompanyPortal.exe in C:\Program Files. The app installs to C:\Program Files (x86) due to a 32-bit installer. What is the most likely outcome?

Accepted Answer

Intune repeatedly tries to install the app because it is not detected. Detection rules do not automatically check both Program Files folders unless configured. The rule checks the 64-bit folder, so it will not detect the app installed in Program Files (x86) and will report as not installed. Option B is correct.

Answer

The app is successfully detected and no action is taken

Answer

The app installation fails with error

Answer

The detection rule automatically adjusts to check both folders

Question 10

You have the above compliance policy for Windows 10. A device running Windows 10 version 22H2 (build 22621.1) will be marked as?

Accepted Answer

Noncompliant because the OS version exceeds the maximum. The policy sets osMaximumVersion to 10.0.22621. Build 22621.1 is within that version (22621 > 19041 but <= 22621). However, the policy requires min 19041, so the device is compliant. But note: the maximum version is inclusive? In Intune, osMaximumVersion uses 'less than or equal' to the version string. 22621.1 <= 22621? Version comparison is tricky; typically, build numbers are compared as integers. 22621.1 is greater than 22621, so it would be noncompliant. Option B is correct.

Answer

Noncompliant because the password minimum length is not met

Answer

Noncompliant because the OS version is below the minimum

Answer

Compliant

Question 11

A user reports that a required line-of-business (LOB) app does not appear on their Windows 11 device enrolled in Microsoft Intune. The app was deployed as a 'Required' assignment to a dynamic device group. The device is compliant and shows as 'Active' in Intune. What is the most likely cause?

Accepted Answer

The device was offline during the last check-in.. Option C is correct because the device might have been offline when the policy evaluation occurred, and the app installation may be pending. Option A is wrong because assignment filters are not mentioned. Option B is wrong because user-targeted apps are different. Option D is wrong because the app is not managed by Microsoft Store for Business.

Answer

The app requires manual approval from Microsoft Store for Business.

Answer

The user is not a member of the device group.

Answer

The app is assigned to users instead of devices.

Question 12

You need to deploy Microsoft 365 Apps for enterprise to 500 Windows 10 devices using Microsoft Intune. Devices are in multiple time zones. You want to minimize network impact during business hours. Which deployment approach should you use?

Accepted Answer

Configure dynamic installation from Microsoft 365 Apps admin center with gradual rollout and set maintenance window.. Option D is correct because dynamic installation via Microsoft 365 Apps admin center allows scheduling outside business hours and uses CDN for bandwidth efficiency. Option A is wrong because offline installer is not scalable. Option B is wrong because delivery optimization helps but does not schedule. Option C is wrong because it does not address time zones.

Answer

Use Intune 'Microsoft 365 Apps for Windows 10 and later' built-in app type with delivery optimization.

Answer

Deploy the offline installer using Intune Win32 app packaging.

Answer

Assign the app to a device group and set deadline for immediate installation.

Question 13

You are troubleshooting an Intune-managed iOS device that cannot install a VPP (Volume Purchase Program) app. The device shows a 'License Not Found' error. The app is assigned as 'Available' without device enrollment. What is the most likely cause?

Accepted Answer

The device is enrolled without user affinity (device enrollment).. Option B is correct because VPP apps require user enrollment for Apple VPP token to assign licenses; device enrollment does not support user-based licensing. Option A is wrong because app removal policy is irrelevant. Option C is wrong because device compliance is not the issue. Option D is wrong because the token is valid.

Answer

The app is configured to remove when the device leaves management.

Answer

The Apple VPP token has expired.

Answer

The device is not compliant with conditional access policies.

Question 14

An organization uses Microsoft Intune to manage Windows 11 devices. They want to deploy a custom script that runs during device provisioning (ESP – Enrollment Status Page). Which app type should they use?

Accepted Answer

PowerShell script (Device configuration). Option B is correct because PowerShell scripts can be run as a 'Windows PowerShell script' in Intune and can be included in ESP. Option A is wrong because Win32 apps are deployed after ESP. Option C is wrong because LOB apps are for MSI/EXE. Option D is wrong because proactive remediations run after enrollment.

Answer

Line-of-business app

Answer

Win32 app

Answer

Proactive remediations

Question 15

You are planning to deploy a Win32 app to Windows 10 devices using Microsoft Intune. The app requires a specific registry key to be present before installation. How should you ensure the prerequisite is met?

Accepted Answer

Configure a detection rule to verify the registry key exists.. Option A is correct because you can use detection rules to check for the registry key; if not found, Intune will not attempt installation. Option B is wrong because requirements rules are for architecture/OS. Option C is wrong because dependencies are for other apps. Option D is wrong because installation behavior is for user context.

Answer

Configure the installation behavior as 'System' to bypass user context.

Answer

Add the registry key as a dependency.

Answer

Set a requirement rule for the registry key.