MD-102 Manage applications Practice Test 4 — 15 Questions

Question 1

You are using Microsoft Intune to deploy a custom Windows app that is packaged as an .msi. The app requires a reboot after installation. You want to minimize user disruption. What is the best deployment strategy?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Assign the app as available to a device group.. Assigning the app as available to a device group allows users to install the app on demand from the Company Portal, but only when they choose to, minimizing disruption. Since the app requires a reboot, making it available (rather than required) lets users schedule the installation and reboot at a convenient time. This approach balances deployment needs with user autonomy, avoiding forced reboots that would interrupt work.

Answer

Assign the app as available to a user group.

Answer

Assign the app as required to a device group.

Answer

Assign the app as required with a deadline.

Question 2

You need to deploy a Microsoft 365 Apps for enterprise configuration that includes Teams and Visio Pro for Microsoft 365. Users should get the full suite with both apps. What is the recommended method?

Accepted Answer

Create a Win32 app with the Office Deployment Tool and a configuration.xml that includes both products.. The Office Deployment Tool (ODT) is the recommended method for deploying customized Microsoft 365 Apps configurations, including Teams and Visio Pro for Microsoft 365, in enterprise environments. By creating a Win32 app with a configuration.xml that specifies both products, you can control installation settings, language, and update channels, which is not possible with the built-in Intune app type for Microsoft 365 Apps.

Answer

Use the built-in Microsoft 365 Apps for enterprise app type in Intune and select the products.

Answer

Instruct users to install from the Office portal.

Answer

Deploy a PowerShell script that runs Setup.exe /configure.

Question 3

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a .pkg app that is signed by a developer certificate that is not yet trusted on the devices. What must you do to allow the installation?

Accepted Answer

Use a device configuration policy to trust the developer certificate before deploying the app.. MacOS requires that the developer certificate of a .pkg app be trusted at the system level before installation can proceed. By deploying a device configuration policy in Intune that adds the developer certificate to the trusted root store, you establish the necessary trust chain, allowing the .pkg to install without user intervention. This approach aligns with macOS Gatekeeper and security policies, which block unsigned or untrusted packages by default.

Answer

Deploy the app as a line-of-business app with the 'Allow user to bypass' option enabled.

Answer

Instruct users to manually approve the installation in System Preferences.

Answer

Convert the .pkg to a .dmg and deploy via Microsoft Store for Business.

Question 4

You are configuring an app protection policy for iOS devices to protect corporate data in Microsoft Outlook. Which TWO settings prevent users from copying corporate data to personal apps?

Accepted Answer

Allow app to transfer data to other apps. Setting 'Allow app to transfer data to other apps' to 'Policy managed apps' or 'None' prevents corporate data from being transferred from Outlook to unmanaged personal apps. Option D is correct because 'Restrict cut, copy, and paste between apps' can be set to 'Policy managed apps' or 'None', which blocks users from copying corporate data from Outlook and pasting it into personal apps. These two settings directly control data movement at the app-to-app and clipboard levels.

Answer

Save copies of work data

Answer

Block screen capture and screen recording

Answer

Encrypt app data

Question 5

You are deploying a Win32 app via Intune that requires .NET Framework 4.8 as a dependency. Which THREE steps must you perform to ensure the dependency is installed before the app?

Accepted Answer

In the main app's properties, add a dependency and select the .NET Framework app.. Intune dependencies allow you to specify another app that must be installed before the main app. By adding .NET Framework 4.8 as a separate app in Intune and then configuring a dependency in the main app's properties that references that app, you ensure the dependency is installed first. This is the only supported method for enforcing installation order via dependencies in Intune.

Answer

Configure a detection rule for .NET Framework in the main app.

Answer

Create a supersedence relationship where the .NET Framework app supersedes the main app.

Question 6

You are configuring a Microsoft Intune app configuration policy for a managed iOS app. Which THREE types of settings can you include in the policy?

Accepted Answer

Permissions such as location or camera. Intune app configuration policies for managed iOS apps can include permissions settings (e.g., location, camera, contacts) to control whether the app can access device features. These are defined using the iOS managed app configuration schema, which allows you to specify permission behaviors such as 'Allow,' 'Deny,' or 'Prompt' for each protected resource.

Answer

Compliance rules for the app

Answer

Network requirements like VPN

Question 7

Your organization uses Microsoft Intune to manage Windows 11 devices. You need to deploy a line-of-business (LOB) app that is signed with a certificate not trusted by the devices. What should you do to ensure the app installs successfully?

Accepted Answer

Enable the Sideloading policy for the device group.. Enabling the Sideloading policy for the device group allows installation of line-of-business (LOB) apps signed with a certificate not trusted by the devices. In Microsoft Intune, sideloading bypasses the requirement for the app's signing certificate to be trusted by the device's trusted root store, enabling successful installation of internally developed or signed LOB apps on Windows 11 devices managed via Intune.

Answer

Create a device configuration profile to allow sideloading.

Answer

Add the app to the Microsoft Store for Business.

Answer

Disable automatic app updates for the device group.

Question 8

You manage iOS devices with Microsoft Intune. A user reports that a required app is missing from their device. You verify the app is assigned as 'Required' to a user group containing the user, and the device is compliant. What is the most likely reason the app is not installing?

Accepted Answer

The app is configured to require user enrollment, but the device uses device enrollment.. When an iOS app is configured with a 'Require user enrollment' assignment filter, it will only install on devices that use User Enrollment (which creates a per-user management identity). If the device uses Device Enrollment (e.g., via Apple Business Manager or manual device enrollment), the app will not install even if assigned as 'Required' to a user group. This is a common configuration mismatch that prevents app delivery.

Answer

The app is set to 'Available for enrolled devices' instead of 'Required'.

Answer

The device is not enrolled using Apple Device Enrollment Program (DEP).

Answer

The Apple Volume Purchase Program (VPP) token has expired.

Question 9

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to deploy a Microsoft 365 Apps for enterprise suite to all devices. Which app type should you use in Intune?

Accepted Answer

Microsoft 365 Apps for Windows 10 and later. To deploy Microsoft 365 Apps for enterprise, use the 'Microsoft 365 Apps for Windows 10 and later' app type in Intune. This pre-configured app type handles the installation and updates of the Office suite. Option C is correct. Option A (Web link) is wrong because it only creates a shortcut, not installs the app. Option B (Windows app (Win32)) is wrong because it is used for standalone .exe or .msi installers, not for the Office suite which has its own dedicated type. Option D (Line-of-business app) is wrong because it is intended for custom or in-house developed apps, not for Microsoft 365 Apps.

Answer

Web link

Answer

Windows app (Win32)

Answer

Line-of-business app

Question 10

You are troubleshooting an Android Enterprise device that fails to install a required app from the Managed Google Play store. The device is compliant and has a valid work profile. What should you check first?

Accepted Answer

Ensure the Managed Google Play app is enabled and active on the device.. The Managed Google Play app is the client-side component that processes app installation requests on Android Enterprise devices. Even if the device is compliant and has a valid work profile, if the Managed Google Play app is disabled, frozen, or not active, it cannot receive or execute the installation command from the EMM console. This is the first thing to verify because it is a prerequisite for any app deployment via Managed Google Play.

Answer

Check that the device is enrolled in Android Enterprise and has a work profile.

Answer

Confirm the user has approved the app installation in the Managed Google Play store.

Answer

Verify the device compliance policy allows app installation from unknown sources.

Question 11

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a custom .pkg app that requires specific installation parameters. Which app type should you select?

Accepted Answer

macOS app (PKG). The macOS app (PKG) type is correct for deploying a custom .pkg app that requires specific installation parameters. Intune's native PKG app type allows you to define a custom installation command (e.g., installer -pkg MyApp.pkg -target /) with the required flags, providing full control over the installation. In contrast, the DMG app type is designed for .dmg disk images, not standalone .pkg files.

Answer

Line-of-business app

Answer

macOS app (DMG)

Answer

Windows app (Win32)

Question 12

Your organization uses Microsoft Intune to deploy apps to Windows 11 devices. You need to ensure that a Win32 app installs only when the device has at least 4 GB of RAM. What should you configure?

Accepted Answer

A requirement rule that specifies minimum RAM. To enforce a hardware prerequisite like minimum RAM for a Win32 app in Microsoft Intune, you configure a requirement rule. Requirement rules define the device conditions (e.g., operating system architecture, disk space, or RAM) that must be met before the app can install. Option C is correct because it directly specifies a minimum RAM value as a requirement rule, ensuring the app installs only on devices with at least 4 GB of RAM.

Answer

A dependency rule that includes a RAM check

Answer

A return code for insufficient RAM

Answer

A detection rule for RAM

Question 13

You manage iOS devices with Microsoft Intune. You need to deploy an app that is not available in the Apple App Store. The app is developed internally and signed with an enterprise certificate. Which app type should you use?

Accepted Answer

iOS/iPadOS Line-of-business app. For internally developed iOS apps not in the App Store, use the iOS/iPadOS Line-of-business app type. Option D is correct. Option A is wrong because the iOS app store app type is for apps from the App Store. Option B is wrong because the Web link type is for web shortcuts. Option C is wrong because the Built-in app type is for pre-installed system apps.

Answer

iOS/iPadOS app store app

Answer

Web link

Answer

Built-in app

Question 14

Your organization uses Microsoft Intune to manage Android devices. You need to deploy an app that is available in the Managed Google Play store as a required app. What must you do first?

Accepted Answer

Connect Intune to the Managed Google Play store.. To deploy a required app from the Managed Google Play store, you must first establish the connection between Intune and the Managed Google Play store. This connection is a prerequisite because Intune uses it to synchronize apps, manage licenses, and push required apps to Android devices. Without this connection, Intune cannot access or deploy any apps from the Managed Google Play store.

Answer

Enroll the device in Intune.

Answer

Install the Managed Google Play app on the device.

Answer

Upload the app package to Intune.

Question 15

Which TWO actions are required to deploy a Win32 app using Microsoft Intune? (Choose two.)

Accepted Answer

Upload the .intunewin package file.. Uploading the .intunewin package file is mandatory for deploying a Win32 app via Intune; this file encapsulates the app's installation files and metadata. Option B is correct because configuring detection rules is essential to verify the app's installation status and reapply policies as needed. Both actions are required for successful deployment.

Answer

Connect to Managed Google Play.

Answer

Assign a Microsoft Store license.

Answer

Sign the app with a macOS developer certificate.