MD-102 Manage applications Practice Test 12 — 15 Questions

Question 1

Which TWO app types are available for deploying apps to iOS/iPadOS devices in Microsoft Intune? (Choose two.)

Accepted Answer

iOS/iPadOS app store app. Option B (iOS/iPadOS app store app) is correct because Intune supports deploying apps directly from the Apple App Store to managed iOS/iPadOS devices, either as required or available installs, using the built-in app type for store-published apps. Option E (iOS/iPadOS Line-of-business app) is correct because Intune allows uploading and assigning custom in-house .ipa packages for iOS/iPadOS, which is the standard method for distributing proprietary enterprise apps. Option A (Web link) is not an iOS/iPadOS-specific app type in this context; it is a generic web link app type used across platforms to pin a URL, not a native iOS app deployment type. Option C (Windows app (Win32)) is incorrect because Win32 apps target Windows devices, not iOS/iPadOS. Option D (Android Line-of-business app) is incorrect because Android LOB apps are for Android devices and use .apk or .aab packages, not iOS/iPadOS.

Answer

Web link

Answer

Windows app (Win32)

Answer

Android Line-of-business app

Question 2

You are deploying a line-of-business (LOB) app to iOS devices using Microsoft Intune. The app is signed with an enterprise certificate. Users report that the app installs but crashes immediately on launch. What is the most likely cause?

Accepted Answer

The enterprise developer certificate is not trusted on the device.. The most likely cause is that the enterprise developer certificate is not trusted on the device. iOS requires that enterprise-signed apps have their root certificate manually trusted via a profile (e.g., MDM or manual installation) before the app can run. Without this trust, iOS blocks the app from executing, causing an immediate crash on launch.

Answer

The Intune company portal app is not installed.

Answer

The app is not signed.

Answer

The app requires a VPN connection.

Question 3

You manage a fleet of Windows 10 devices with Microsoft Intune. You need to deploy a Win32 app that has a complex installation requiring multiple command-line parameters. The app must be available to users in the Company Portal. What is the best way to handle the installation parameters?

Accepted Answer

Use the Intune Win32 app packaging to specify the installation command with parameters.. Intune's Win32 app packaging allows you to specify the full installation command, including complex parameters, directly in the 'Install command' field. This method ensures the installer runs with the exact parameters needed, and the app is then published to the Company Portal for user self-service. PowerShell scripts or detection rules do not handle the installation parameters themselves, and administrative templates are for configuring settings, not installation commands.

Answer

Deploy a PowerShell script via Intune that runs the installer with parameters.

Answer

Configure detection rules to run a script that passes parameters.

Answer

Use an administrative template to set parameters before installing.

Question 4

Which THREE of the following are valid methods to deploy Microsoft 365 Apps for enterprise using Microsoft Intune?

Accepted Answer

Use the built-in Microsoft 365 Apps app type in Intune.. Option A is correct because Intune provides a native Microsoft 365 Apps (Windows 10 and later) app type that lets you configure the Office apps, update channel, and architecture directly from the console without packaging. Option B is correct because you can use the Office Deployment Tool (ODT) with a configuration.xml and run setup.exe via a script (e.g., PowerShell or platform script) deployed through Intune to install Microsoft 365 Apps. Option D is correct because you can wrap the Office installer (using the ODT or a prepared source) into an .intunewin file and deploy it as a Win32 app, which supports custom detection and requirement rules. Option C is not valid because Microsoft Entra ID application registration is for identity/consent of apps, not for deploying Office binaries to devices. Option E is not valid because Microsoft 365 Apps for enterprise is delivered via Click-to-Run, not as an MSI, so there is no supported MSI deployment method for this product through Intune.

Answer

Assign the apps via Azure AD application registration.

Answer

Deploy the MSI version of Office via Intune.

Question 5

Refer to the exhibit. You query Microsoft Graph API and receive this JSON for a managed device. App2 installation failed. The app is a Win32 app deployed as required. The device is compliant and enrolled via MDM. What is the most likely reason for the failure?

Accepted Answer

The Intune Management Extension is not installed.. Win32 apps deployed as required require the Intune Management Extension (IME) to be present on the device for installation. Since the device is enrolled via MDM and compliant, but the app installation failed, the most likely cause is that the IME is missing or not functioning. The IME handles Win32 app deployment, detection, and remediation, and without it, required Win32 apps cannot install.

Answer

The app is not assigned to the user.

Answer

The app version is incompatible with the device OS.

Answer

The device is not compliant.

Question 6

You need to deploy an Android Enterprise app to corporate-owned work profile devices. The app is available on Google Play. Which deployment method should you use?

Accepted Answer

Managed Google Play. Managed Google Play is the correct deployment method for Android Enterprise corporate-owned work profile devices because it provides a curated, enterprise-specific app catalog that integrates directly with Intune. Google Play hosts the app, and Intune uses Managed Google Play to approve, deploy, and manage apps on these devices without requiring user interaction.

Answer

Microsoft Store for Business

Answer

Apple Business Manager

Answer

Side-loading via Intune

Question 7

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a custom .pkg app to all macOS devices. What app type should you create in Intune?

Accepted Answer

macOS app (line-of-business). To deploy a custom .pkg app to macOS devices via Microsoft Intune, you must create a macOS line-of-business (LOB) app. LOB apps are designed for sideloading custom or in-house applications that are not available in the public app store, and Intune supports .pkg and .dmg formats for macOS LOB deployment. This app type allows you to upload the .pkg file directly and assign it to devices, handling installation through the Intune management agent.

Answer

Windows app (Win32)

Answer

Web link

Answer

iOS app (line-of-business)

Question 8

You are deploying a Win32 app that requires administrator privileges to install. The app runs on Windows 11 devices. How should you configure the app in Intune to ensure it installs with elevated privileges?

Accepted Answer

Set the app install behavior to 'System'.. Setting the install behavior to 'System' in Intune for a Win32 app ensures the installer runs with the SYSTEM account, which inherently has administrator privileges. This is required for apps that demand elevated rights during installation, as the SYSTEM account bypasses user account control (UAC) and can write to protected system locations like Program Files or the registry.

Answer

Set the app to run in user context.

Answer

Use a PowerShell script to run the installer.

Answer

Configure a detection rule to check for admin rights.

Question 9

Which FOUR of the following are valid detection rules for a Win32 app in Intune?

Accepted Answer

PowerShell script (custom detection). Option A (PowerShell script / custom detection) is valid because Intune Win32 apps support a custom detection script whose exit code and stdout determine whether the app is considered installed. Option B (MSI product code) is valid because Intune can detect an installed app by matching its MSI product code in the Windows Installer database. Option C (Registry key or value exists) is valid because Intune's registry detection rule checks for a specified key/value (and can compare a value's string, integer, or version) to confirm installation. Option D (File system / file or folder exists) is valid because Intune's file/folder detection rule verifies existence (and optionally date, size, or version) of a specified path. Option E (Network share access) is not a supported Win32 app detection rule type in Intune, so it does not belong.

Answer

Network share access

Question 10

Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to deploy a Microsoft 365 Apps for Enterprise to work profiles. Which app type should you select in Intune?

Accepted Answer

Managed Google Play app. For deploying Microsoft 365 Apps for Enterprise to Android Enterprise work profiles, the correct app type is Managed Google Play app. Intune integrates with Managed Google Play to distribute approved apps to work profiles, ensuring compliance with Android Enterprise policies. Web apps, system apps, and line-of-business apps cannot deliver the full Microsoft 365 suite with managed configuration and app protection policies in a work profile context.

Answer

Web app

Answer

Android Enterprise system app

Answer

Line-of-business app

Question 11

A company uses Microsoft Intune to manage devices. They need to ensure that a critical line-of-business app is updated automatically on all devices. Which assignment type should they use?

Accepted Answer

Required. The Required assignment type in Microsoft Intune automatically installs and updates apps on managed devices without user interaction, making it the correct choice for ensuring a critical line-of-business app is updated automatically. This assignment enforces the app deployment policy by pushing the update to devices during their next check-in with the Intune service, typically within 8 hours.

Answer

End-user notification

Answer

Uninstall

Answer

Available for enrolled devices

Question 12

Your organization uses Microsoft Intune to manage Windows 10 devices. They deploy a Win32 app using detection rules. The app installs but the detection rule incorrectly reports failure, causing repeated installation attempts. What is the best way to resolve this?

Accepted Answer

Update the detection rule to accurately reflect installed state. The detection rule is the mechanism Intune uses to determine whether a Win32 app is already installed. If the rule incorrectly reports failure despite successful installation, Intune will repeatedly attempt to reinstall the app. Updating the detection rule to accurately reflect the installed state (e.g., checking for the correct file, registry key, or version) stops the unnecessary reinstall loop without requiring manual intervention or reconfiguration of the deployment.

Answer

Uninstall and redeploy the app

Answer

Reinstall the app manually

Answer

Modify the installation command to suppress output

Question 13

Your organization needs to deploy a web app link to users' devices via Microsoft Intune. Which app type should you select?

Accepted Answer

Web link. C is correct because a Web link app type in Microsoft Intune allows you to deploy a shortcut to a web app on users' devices without installing any software. This is ideal for linking to a web app that runs in a browser, as it simply places an icon on the device's app list or home screen that opens the specified URL.

Answer

Windows app (Win32)

Answer

iOS store app

Answer

Managed Google Play app

Question 14

Refer to the exhibit. An administrator retrieves a list of Win32 apps. They notice that one app shows installExperience as 'system' and detectionRules as 'fileVersion' with version '1.0.0'. The app fails to install on some devices. The event viewer on a failing device shows 'The app was installed but detection rule did not match'. What is the most likely cause?

Accepted Answer

The detection rule expects version 1.0.0 but the installed version is different. The detection rule is configured to check for file version '1.0.0', but the installed version on the failing device does not match this value. When Intune deploys a Win32 app, it uses the detection rule to verify successful installation; if the rule does not match, the app is marked as failed even though the installation itself completed. This mismatch is the most likely cause of the event viewer message.

Answer

The PowerShell cmdlet is deprecated

Answer

The installExperience should be 'user' instead of 'system'

Answer

The app requires a reboot that is not handled

Question 15

You need to make a web app available to users in your organization through Microsoft Intune Company Portal. Which app type should you create in Intune?

Accepted Answer

Web app. To make a web app available through Microsoft Intune Company Portal, you must create a 'Web app' type. This app type allows you to add a link to a web application that users can access via the Company Portal, without needing to install a native client. Intune's Web app type supports both HTTP and HTTPS URLs and can be configured with a display name, URL, and icon for the Company Portal listing.

Answer

iOS store app

Answer

Windows app (Win32)

Answer

Android store app