MD-102 Manage applications Practice Test 11 — 15 Questions

Question 1

Your organization deploys Microsoft Defender for Endpoint (now Microsoft Defender XDR) on Windows 10 devices using Intune. After deployment, some devices show 'Defender service is not running' in the security console. The devices are online and compliant. What is the most likely cause?

Accepted Answer

A third-party antivirus is installed and active.. Option C is correct because if another antivirus product is active, Defender will disable itself to avoid conflict. Option A is wrong because compliance policy does not disable service. Option B is wrong because tamper protection prevents changes, not failure. Option D is wrong because firewall is unrelated.

Answer

Tamper protection is enabled and blocking the service.

Answer

The devices are not compliant with the Defender policy.

Answer

Windows Firewall is blocking Defender updates.

Question 2

You need to deploy a Microsoft Store app (e.g., Microsoft Whiteboard) to Windows 10 devices managed by Intune. Which app type should you use?

Accepted Answer

Microsoft Store app (Windows). Option A is correct because Microsoft Store apps are deployed using the 'Microsoft Store app (Windows)' type in Intune. Option B is wrong for offline apps. Option C is wrong for packaged apps. Option D is wrong for web links.

Answer

Windows app (Win32)

Answer

Web link

Answer

Microsoft Store for Business (offline licensed)

Question 3

A user reports that a Microsoft 365 Apps for enterprise installation on a Windows 10 device fails with error code 30088-1028. The device is managed by Intune. What is the most likely cause?

Accepted Answer

The device does not have enough free disk space.. Option C is correct because error 30088-1028 typically indicates insufficient disk space for installation. Option A is wrong because proxy issues cause different errors. Option B is wrong because license assignment errors are different. Option D is wrong because Windows update is unrelated.

Answer

Windows Update is disabled on the device.

Answer

The user does not have an appropriate license assigned.

Answer

The device is behind a proxy that blocks the Microsoft CDN.

Question 4

You are deploying a Win32 app that requires .NET Framework 4.8. You create a dependency in Intune for the .NET Framework app. However, some devices fail to install the parent app even though .NET Framework is present. What is the most likely issue?

Accepted Answer

The dependency detection rule does not match the actual .NET installation.. Option D is correct because dependency rules check for app presence by detection method; if the detection method is not configured correctly, Intune may think .NET is not installed. Option A is wrong because dependencies do not check version by default. Option B is wrong because dependencies can be set to auto-install. Option C is wrong because the parent app does not install before dependency.

Answer

The dependency version is set to 'Greater than' instead of 'Greater than or equal to'.

Answer

The parent app is set to install before the dependency.

Answer

The dependency is set to 'Do not install automatically'.

Question 5

Which TWO of the following are valid app types in Microsoft Intune for iOS/iPadOS devices?

Accepted Answer

iOS line-of-business app. Option A (iOS store app) and Option C (iOS LOB app) are valid. Option B is for Android. Option D is for Windows. Option E is a configuration policy, not an app type.

Answer

Windows 10 Universal app

Answer

Android Enterprise system app

Answer

Managed Google Play iframe

Question 6

Which THREE of the following are required to deploy a Win32 app using Microsoft Intune?

Accepted Answer

Detection rule. Options A, B, and C are required: a detection rule to verify installation, an installation command, and a return code for success. Option D is optional; Option E is only for MSI apps.

Answer

Product code

Answer

Dependencies

Question 7

Which TWO of the following are valid reasons to use a Windows PowerShell script deployment instead of a Win32 app in Intune?

Accepted Answer

Applying a temporary security configuration change quickly. Option A (quick fix) and Option C (registry changes) are valid for scripts. Option B is better for Win32. Option D applies to both. Option E is for configuration profiles.

Answer

Configuring Windows Update for Business policies

Answer

Installing an MSI with silent switches

Answer

Deploying a complex application with multiple files

Question 8

Refer to the exhibit. You are reviewing a Win32 app deployment configuration in Microsoft Intune. The detection rule checks for a registry key under HKLM. The app is set to install in user context. A user reports that the app appears as 'Installed' for some users but not others on the same device. What is the most likely cause?

Accepted Answer

The detection rule uses HKLM but the app installs per user, so the key may not exist for all users.. Option A is correct because the detection rule uses HKLM (machine-level), but the app installs per user; the detection might succeed for one user and not another if the registry key is written per user. Option B is wrong because 32-bit on 64-bit is false. Option C is wrong because detection type 'exists' does not check value. Option D is wrong because install context does not affect detection rule location.

Answer

The detection type 'exists' should be 'value' to check the DisplayName.

Answer

The install experience should be 'system' to write to HKLM.

Answer

The 'check32BitOn64System' flag is set to false, causing detection to fail on 64-bit systems.

Question 9

You are a Microsoft 365 Endpoint Administrator for Contoso Ltd. The company has 2,000 Windows 11 devices enrolled in Microsoft Intune. You need to deploy a custom line-of-business (LOB) application (AppX package) to 500 devices used by the sales team. The app must be available in the Company Portal for users to install on demand, but it should also be automatically installed on devices that have not installed it within 7 days. Additionally, you want to ensure that the app is removed if a device is unenrolled from Intune. The sales team members are in a dynamic device group called 'Sales Devices' based on device category. You have the AppX package (.appxbundle) signed with a trusted certificate. You need to choose the correct deployment approach from the four options below.

Accepted Answer

Add as a Line-of-business app, assign to 'Sales Devices' group as 'Required', and also assign to the same group as 'Available' for Company Portal.. Option C is correct: A required assignment to the device group ensures installation on all devices; the 'Available' assignment makes it visible in Company Portal; the removal on unenroll is automatic with required assignment. Option A has no required assignment. Option B uses user group, not device group. Option D uses 'Available' assignment with deadline, but the deadline is not supported for LOB apps in that way.

Answer

Add as a Microsoft Store for Business (offline) app, assign to 'Sales Devices' group as 'Available', and configure deadline after 7 days.

Answer

Add as a Line-of-business app, assign to 'Sales Devices' group as 'Available', and configure 'Available for enrolled devices' with deadline after 7 days.

Answer

Add as a Windows app (Win32), assign to a user group containing sales users as 'Required', and set deadline to 7 days.

Question 10

Your organization uses Microsoft Intune to manage 1,500 Windows 10 and 500 macOS devices. You need to deploy Microsoft Edge (Stable channel) to all Windows devices. The deployment must ensure that Edge is set as the default browser, and that the 'SmartScreen' feature is enabled. You also want to ensure that users cannot change the default browser setting. You have created a configuration profile with the required settings. The Edge app is available in the Microsoft Store for Business. Which deployment method should you use to meet all requirements with the least administrative effort?

Accepted Answer

Use the 'Microsoft Edge for Windows 10 and later' built-in app type in Intune, assign it as 'Required' to a device group, and apply the configuration profile.. Option A is correct: Using the built-in 'Microsoft Edge for Windows 10 and later' app type in Intune allows you to set default browser and manage policies via configuration profiles. Option B is manual and less integrated. Option C requires scripting. Option D is not a built-in feature.

Answer

Use a PowerShell script to install Edge and apply settings via registry.

Answer

Deploy Edge as a Win32 app using the offline installer, and apply the configuration profile separately.

Answer

Deploy Edge as a Microsoft Store for Business app and use OMA-URI to set default browser.

Question 11

You are a Microsoft 365 administrator for a school district. You have 2,000 Windows 10 devices used by students. All devices are enrolled in Microsoft Intune. You need to deploy a set of educational apps from the Microsoft Store for Education (now part of Microsoft Store for Business). The apps should be automatically installed on all student devices, and students should not be able to remove them. You have already added the apps to your Microsoft Store for Business inventory and acquired offline licenses. You have also configured Intune to sync the Microsoft Store for Business. Which action should you take in Intune to deploy the apps with the least administrative effort?

Accepted Answer

Create a 'Microsoft Store for Business' app in Intune, select the offline-licensed apps, and assign as 'Required' to a device group containing all student devices.. Option A is correct: Using the 'Microsoft Store for Business' app type with offline licenses allows automatic sync and silent installation. Option B is for user-targeted. Option C is for online licenses. Option D is for Win32 apps.

Answer

Use the 'Microsoft Store app (Windows)' type and assign as 'Required' to the device group.

Answer

Create a 'Microsoft Store for Business' app in Intune, select the online-licensed apps, and assign as 'Available' to a user group.

Answer

Download the app packages and deploy as Win32 apps with silent switches.

Question 12

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to deploy a line-of-business (LOB) app that requires a reboot after installation. Which deployment configuration should you use to ensure the app installs and the device reboots outside of business hours?

Accepted Answer

Available assignment with a deadline and a grace period for reboot. Option B is correct because the 'Available' assignment with 'Deadline' and 'Grace period' allows users to install the app during non-business hours and provides a grace period before forced reboot. Option A is wrong because 'Required' assignment with 'Immediate' reboot would force reboot immediately. Option C is wrong because 'Uninstall' assignment removes the app. Option D is wrong because 'Available' without deadline does not enforce reboot timing.

Answer

Available assignment without deadline

Answer

Uninstall assignment for all devices

Answer

Required assignment with a reboot behavior of 'Immediate'

Question 13

A user reports that a Microsoft 365 Apps for enterprise installation failed on their Windows 11 device managed by Intune. The Intune management extension logs show error code 0x80070005. The device is Azure AD joined and compliant. What is the most likely cause?

Accepted Answer

The user does not have local administrator privileges on the device. Option C is correct because error 0x80070005 indicates 'Access Denied', often due to missing local admin rights. Option A is wrong because this error is not related to network connectivity. Option B is wrong because error 0x80070005 is not a disk space error. Option D is wrong because the device is compliant, so compliance policy is not the issue.

Answer

The device has insufficient disk space

Answer

The device does not have internet connectivity to the Microsoft CDN

Answer

The device is not compliant with the conditional access policy

Question 14

You are configuring a Windows 10 kiosk device using Intune. The device should run a single-store app in full-screen mode. Which Intune policy type should you use?

Accepted Answer

A device configuration profile using the 'Kiosk' settings for single-app mode. Option A is correct because a kiosk configuration profile with single-app mode is used for full-screen single-store app kiosks. Option B is wrong because device restrictions do not configure kiosk mode. Option C is wrong because a compliance policy does not enforce app behavior. Option D is wrong because a configuration profile for Microsoft Edge is for browser settings.

Answer

A device restrictions profile blocking access to other apps

Answer

A compliance policy requiring the app to be installed

Answer

A configuration profile for Microsoft Edge in kiosk mode

Question 15

Your organization uses Intune to manage iOS/iPadOS devices. You need to deploy a custom SSL certificate to all devices for accessing an internal web app. Which profile type should you use?

Accepted Answer

Trusted certificate profile. Option B is correct because a trusted certificate profile deploys root CA certificates. Option A is wrong because SCEP profile is for issuing certificates via SCEP protocol, not deploying an existing certificate. Option C is wrong because PKCS profile is for certificate enrollment. Option D is wrong because a custom configuration profile is for arbitrary settings, but certificate deployment uses dedicated certificate profiles.

Answer

PKCS certificate profile

Answer

SCEP certificate profile

Answer

Custom configuration profile (preferences)