MD-102 Manage applications Practice Test 5 — 15 Questions

Question 1

You deploy a Microsoft 365 Apps for enterprise suite via Intune to Windows devices. Users report that updates are not being applied automatically. You need to ensure that updates are installed from the Office Content Delivery Network (CDN) without user intervention. What should you configure?

Accepted Answer

Configure the Office update channel via an Intune administrative template (ADMX).. Office update channel can be set via Intune administrative template. Option B is incorrect because Windows Update for Business does not manage Office updates. Option C is incorrect because Office Deployment Tool is for initial deployment. Option D is incorrect because Delivery Optimization is for peer caching, not update source.

Answer

Configure Delivery Optimization to download from peers.

Answer

Enable Windows Update for Business to manage Office updates.

Answer

Use the Office Deployment Tool to set update settings.

Question 2

Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You need to deploy a Microsoft Copilot app that requires users to sign in with their work account. The app must be automatically installed without user interaction. What should you do?

Accepted Answer

Purchase the app through Apple Business Manager and assign it as a required app in Intune.. VPP apps can be assigned as required and installed silently if device is supervised. Option B is incorrect because Company Portal requires user to initiate. Option C is incorrect because APP does not install apps. Option D is incorrect because web clip is not the app.

Answer

Configure a web clip that links to the app in the App Store.

Answer

Create an Intune App Protection Policy for the app.

Answer

Add the app as a line-of-business app and deploy via Company Portal.

Question 3

You manage a fleet of Windows 10 devices with Microsoft Intune. You need to deploy a Win32 app that has a complex installation requiring multiple command-line parameters. The app must be available to users in the Company Portal. What is the best way to handle the installation parameters?

Accepted Answer

Use the Intune Win32 app packaging to specify the installation command with parameters.. Intune Win32 app deployment allows specifying installation command and parameters in the app package. Option B is incorrect because detection rules do not install. Option C is incorrect because PowerShell scripts can be included but not as separate assignment. Option D is incorrect because administrative templates configure settings, not install apps.

Answer

Deploy a PowerShell script via Intune that runs the installer with parameters.

Answer

Configure detection rules to run a script that passes parameters.

Answer

Use an administrative template to set parameters before installing.

Question 4

Your organization has devices enrolled in Microsoft Intune that are not domain-joined. You need to deploy a LOB app that requires a license key stored in a file. The app must be installed automatically when devices are enrolled. What should you do?

Accepted Answer

Package the app as a Win32 app and include a script to copy the license file.. Intune can deploy Win32 app with script that reads license file. Option B is incorrect because Store apps cannot include custom license files. Option C is incorrect because APP does not install apps. Option D is incorrect because Azure AD joined is not required for Intune.

Answer

Use a Microsoft Store for Business app and include the license as a dependency.

Answer

Join devices to Azure AD and use Group Policy to install.

Answer

Create an Intune App Protection Policy to deploy the license.

Question 5

Which TWO of the following are prerequisites for deploying a Win32 app via Microsoft Intune?

Accepted Answer

The app must be packaged using the Microsoft Win32 Content Prep Tool.. Win32 app requires the Intune Management Extension and the app must be packaged in .intunewin format. Option C is incorrect because Company Portal is optional. Option D is incorrect because Windows 10 version 1607+ is required. Option E is incorrect because Azure AD join is not required.

Answer

The device must be running Windows 10 version 1803 or later.

Answer

The device must be Azure AD joined.

Answer

The device must have the Company Portal app installed.

Question 6

Which THREE of the following are valid methods to deploy Microsoft 365 Apps for enterprise using Microsoft Intune?

Accepted Answer

Use the built-in Microsoft 365 Apps app type in Intune.. Intune supports deploying via built-in Microsoft 365 Apps app type, Win32 app packaging, and using the Office Deployment Tool. Option D is incorrect because Azure AD is identity, not deployment method. Option E is incorrect because Intune does not use MSI for M365 Apps.

Answer

Assign the apps via Azure AD application registration.

Answer

Deploy the MSI version of Office via Intune.

Question 7

Which TWO of the following are benefits of using Microsoft Intune to manage applications on mobile devices?

Accepted Answer

Ability to deploy apps to devices without requiring sideloading.. Intune allows deploying apps without sideloading and can selectively wipe corporate data. Option C is incorrect because Intune does not provide local backup. Option D is incorrect because Intune manages app installation, not just compliance. Option E is incorrect because device-based licensing is not a primary benefit.

Answer

Enforcement of device compliance before app installation.

Answer

Support for user-based licensing only.

Answer

Automatic backup of app data to the cloud.

Question 8

Refer to the exhibit. You deploy this AppLocker policy via Microsoft Intune to Windows 10 devices. The policy is in AuditOnly mode. Users are now able to run unsigned executables. You need to block unsigned executables without affecting signed ones. What should you do?

Accepted Answer

Change the EnforcementMode to 'Enabled' and add a deny rule for unsigned executables.. The rule allows all Microsoft signed apps but is in audit mode. To block unsigned, you must change EnforcementMode to Enabled and add a deny rule for unsigned. Option A is correct because simply enabling enforcement will block unsigned (since no allow rule for unsigned). Option B is incorrect because adding deny rule for signed would block signed. Option C is incorrect because deleting the rule would block all executables. Option D is incorrect because audit mode does not block.

Answer

Add a deny rule for all Microsoft signed executables.

Answer

Keep the policy in AuditOnly and rely on Windows Defender to block unsigned apps.

Answer

Delete the existing rule and create a new rule that explicitly allows only specific signed apps.

Question 9

Refer to the exhibit. You query Microsoft Graph API and receive this JSON for a managed device. App2 installation failed. The app is a Win32 app deployed as required. The device is compliant and enrolled via MDM. What is the most likely reason for the failure?

Accepted Answer

The Intune Management Extension is not installed.. Win32 apps require the Intune Management Extension (IME) to install on MDM-only devices. Without IME, installation fails. Option A is incorrect because device is compliant. Option B is incorrect because assigned to user or device. Option C is incorrect because compliance does not block installation. Option D is incorrect because version is correct.

Answer

The app is not assigned to the user.

Answer

The app version is incompatible with the device OS.

Answer

The device is not compliant.

Question 10

Refer to the exhibit. You deploy this ARM template to create an Intune configuration policy for macOS devices. The policy sets the 'com.apple.ManagedClient.appstore' setting to true. What is the expected behavior on the target macOS devices?

Accepted Answer

Users will be allowed to install apps from the App Store.. This setting allows the App Store for managed devices. Option A is incorrect because it enables, not disables. Option B is incorrect because it allows App Store, not specific apps. Option C is incorrect because it does not configure updates. Option D is incorrect because it does not enforce certificate.

Answer

App Store updates will be automatically installed.

Answer

Only apps purchased through Apple Business Manager will be installable.

Answer

Users will be blocked from installing apps from the App Store.

Question 11

You need to deploy a line-of-business app to 100 Windows 10 devices that are managed by Microsoft Intune. The app installer is a .msi file. Which app type should you select when adding the app in Microsoft Intune?

Accepted Answer

Windows app (Win32). Windows app (Win32) supports .msi, .exe, and .ps1. Line-of-business (Windows) is for .msi only but deprecated. Microsoft Store app is for store apps. Web link is for web apps. Option B is correct because Win32 app is the recommended type for .msi deployments.

Answer

Microsoft Store app (Windows)

Answer

Windows app (Line-of-business)

Answer

Web link

Question 12

Contoso uses Intune to manage iOS/iPadOS devices. You need to ensure that only approved apps from the Microsoft Store can be installed on corporate devices. What should you configure?

Accepted Answer

Managed App Policies (MAM). App Protection Policies (APP) are for data protection on managed apps, not app installation restrictions. Device Compliance policies enforce compliance, not app control. iOS/iPadOS App Config policies provide configuration, not restrictions. Managed App Policies (MAM) are for app protection. Option B is correct because Managed App Policies can restrict app installation to approved apps.

Answer

App Protection Policies (APP)

Answer

Device Compliance policies

Answer

iOS/iPadOS App Configuration policies

Question 13

A user reports that a required app is not installed on their Windows 11 device managed by Intune. The app appears in the Microsoft Intune admin center with a status of 'Pending - Install Pending'. You verify that the device is online and has network connectivity. What is the most likely cause?

Accepted Answer

The Intune Management Extension has not synced with the service yet.. If the app is pending install, the Intune Management Extension may not have downloaded the policy yet. Option C is correct because the extension checks for new policies every hour. Option A is wrong because user not targeted would show 'Not applicable'. Option B is wrong because app is already assigned as required. Option D is wrong because compliance does not affect app assignment.

Answer

The user is not targeted with the app assignment.

Answer

The app is assigned as 'Available' instead of 'Required'.

Answer

The device is not compliant with conditional access policies.

Question 14

You need to deploy an Android Enterprise app to corporate-owned work profile devices. The app is available on Google Play. Which deployment method should you use?

Accepted Answer

Managed Google Play. Managed Google Play is the store for Android Enterprise apps. Option C is correct. Option A is wrong because Apple Business Manager is for iOS. Option B is wrong because Microsoft Store is for Windows. Option D is wrong because side-loading is not recommended for work profiles.

Answer

Microsoft Store for Business

Answer

Apple Business Manager

Answer

Side-loading via Intune

Question 15

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a custom .pkg app to all macOS devices. What app type should you create in Intune?

Accepted Answer

macOS app (line-of-business). macOS app (line-of-business) supports .pkg and .dmg. Option D is correct. Option A is wrong because Windows app is for Windows. Option B is wrong because iOS app is for iOS. Option C is wrong because web link is for URLs.

Answer

Windows app (Win32)

Answer

Web link

Answer

iOS app (line-of-business)