MD-102 Manage applications Practice Test 5 — 15 Questions

Question 1

Which TWO of the following are required to deploy an iOS line-of-business app via Microsoft Intune? (Select TWO.)

Accepted Answer

iOS app package file (.ipa). To deploy an iOS line-of-business (LOB) app through Microsoft Intune, you must upload the app's iOS app package file (.ipa), so option A is correct because the .ipa contains the actual application binaries that Intune distributes to enrolled devices. Option C is also correct because an iOS provisioning profile is required to authorize the app to run on the targeted devices, defining the app ID, certificates, and device or distribution scope. The Apple Developer signing certificate (B) is used to sign the app and provisioning profile during development, but it is not uploaded to Intune as a separate deployment requirement. A Volume Purchase Program (VPP) token (D) is only needed for purchasing and assigning App Store apps, not for LOB .ipa deployment. An MDM push certificate (E) is required for Intune to communicate with and manage iOS devices, but it is not specific to deploying a LOB app.

Answer

Apple Developer signing certificate

Answer

Volume purchase program (VPP) token

Answer

MDM push certificate

Question 2

Your organization uses Microsoft Intune to manage Windows 10 devices. You need to deploy a line-of-business (LOB) app that is signed with a certificate not trusted by the devices. Which app deployment method should you use?

Accepted Answer

Windows app (sideloading). In Microsoft Intune, the 'Windows app (sideloading)' deployment method is specifically designed for deploying line-of-business (LOB) apps to Windows 10 devices. This method allows you to upload the app package and include the signing certificate. Intune will install the certificate on the device before installing the app, thereby ensuring the app can be installed even if the certificate was not previously trusted.

Answer

Microsoft Store for Business (MSFB) app

Answer

Web app

Answer

Line-of-business (LOB) app

Question 3

A user reports that a required Microsoft 365 Apps for enterprise installation failed on their Windows 11 device managed by Intune. The Intune console shows the app assignment is 'Required' for the user group. The device status shows 'Pending' for over a day. You verify the device is online and checks in regularly. What is the most likely cause?

Accepted Answer

The user does not have a Microsoft 365 license assigned.. Microsoft 365 Apps for enterprise requires a valid license assigned to the user to install and activate. Intune's 'Pending' status indicates the installation is queued but cannot proceed, often due to license validation failure. Even though the device is online and checks in regularly, the app assignment will remain pending until the user has a license, as the Intune management extension waits for license confirmation before downloading and installing the suite.

Answer

The device has not checked in with Intune recently.

Answer

The device does not have enough disk space.

Answer

The app is assigned to the device group instead of the user group.

Question 4

Your organization uses Microsoft Intune to manage devices. You need to deploy a custom Windows 10 line-of-business app that is not signed. Which action must you take on the target devices to allow installation?

Accepted Answer

Enable sideloading on the devices.. To install an unsigned line-of-business (LOB) app on Windows 10 via Intune, sideloading must be enabled on the target devices. Sideloading allows the installation of apps that are not signed by the Microsoft Store, which is required for custom LOB apps that lack a valid signature. This setting can be configured via a device configuration profile in Intune using the 'Allow sideloading of apps' policy.

Answer

Enable Developer Mode on the devices.

Answer

Add the app publisher to the trusted publisher store.

Answer

Turn off Windows Defender SmartScreen.

Question 5

A user on a Windows 11 device managed by Intune reports that a required Win32 app is not installing. The Intune console shows the app assignment is 'Required' and the device status is 'Error'. You review the detection rules and find that the app is detected by file version. The app installs successfully when run manually with admin rights. What is the most likely cause?

Accepted Answer

The detection rule is incorrectly matching an existing file version.. The detection rule uses file version to determine if the app is installed. If an existing file on the device already matches the version specified in the detection rule, Intune will consider the app as already installed and skip the installation, even though the required app is not actually present. This causes a mismatch where the console shows an error because the app assignment is 'Required' but the detection logic falsely reports success, preventing the installation from running.

Answer

The installation script returns a non-zero exit code.

Answer

The Intune Management Extension is not running.

Answer

The installation script fails in system context.

Question 6

Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to deploy a managed Google Play app to a device. The app appears in the managed Google Play store but the deployment status shows 'Failed'. What is the most likely cause?

Accepted Answer

The device does not have Google Play Services installed.. The most likely cause of a 'Failed' deployment status for a managed Google Play app is that the device does not have Google Play Services installed. Google Play Services is a prerequisite for accessing and installing apps from the managed Google Play store. Without it, the device cannot complete the deployment, even if the app is approved and the device is enrolled correctly. Option A is incorrect because personally-owned work profiles do support app deployment; the failure is not inherently due to the profile type.

Answer

The device is enrolled in a personally-owned work profile.

Answer

The device is not allowed to access the managed Google Play store.

Answer

The app is not approved in the managed Google Play store.

Question 7

You are troubleshooting a Microsoft Intune app deployment for a Win32 app that is assigned as 'Available' to a user group. The user reports that the app does not appear in Company Portal. The user is a member of the assigned group. The device is enrolled and compliant. What should you check first?

Accepted Answer

Verify the user is in the correct Azure AD group.. The correct first step is to verify that the user is actually a member of the Microsoft Entra ID group that the app is assigned to. Although the user reports membership, group membership may not have synced to Intune yet, or there might be a group membership caching issue. Company Portal relies on Intune's group membership evaluation to display available apps. Option D is incorrect because adding a Win32 app as a featured app only highlights it in Company Portal but is not required for visibility; available apps appear by default if the user is in the assigned group.

Answer

Review the app detection rules.

Answer

Confirm the app is assigned as 'Required' instead of 'Available'.

Answer

Check if the app is added to Company Portal as a featured app.

Question 8

You need to deploy a Microsoft 365 Apps for enterprise configuration (e.g., exclude specific apps) to Windows 10 devices via Intune. Which tool should you use to generate the configuration XML?

Accepted Answer

Office Customization Tool (OCT). The Office Customization Tool (OCT) is the correct tool because it generates the configuration XML file (configuration.xml) that Intune uses to control Microsoft 365 Apps for enterprise deployments, including excluding specific apps like Access or Publisher. Intune's built-in Office deployment integration relies on this XML to define installation settings, and the OCT is the official Microsoft tool designed for this purpose.

Answer

Group Policy Management Console

Answer

Microsoft 365 admin center

Answer

Microsoft Intune admin center

Question 9

Which TWO of the following are valid app types in Microsoft Intune for deploying applications to Windows 10/11 devices?

Accepted Answer

Windows app (Win32). Option A, Windows app (Win32), is correct because Intune supports deploying Win32 applications to Windows 10/11 devices using the .intunewin package format, which allows for custom installation commands, detection rules, and requirement rules. Option C, Microsoft Store app (new), is also correct because Intune provides a dedicated app type for deploying Microsoft Store apps to Windows 10/11 devices, using the Microsoft Store app (new) connector to sync and assign Store applications. Option B, Web link, is not a valid app type for deploying applications to Windows devices; it is used to pin a web URL to the Company Portal or managed devices, not to install software. Option D, macOS app, targets macOS devices, not Windows 10/11. Option E, Android store app, targets Android devices, not Windows 10/11.

Answer

Web link

Answer

macOS app

Answer

Android store app

Question 10

Which TWO of the following are types of app protection policies (APP) in Microsoft Intune?

Accepted Answer

iOS/iPadOS. In Microsoft Intune, app protection policies (APP) are created per platform, and the supported platform types are iOS/iPadOS (option B) and Android (option E); these are the two mobile platforms for which Intune offers app protection policies that safeguard corporate data at the app level without requiring device enrollment. Option B is correct because iOS/iPadOS APP lets you control data transfer, cut/copy/paste, save-as, and PIN/biometric access for managed apps on iPhones and iPads. Option E is correct because Android APP provides the equivalent data-loss-prevention controls for managed apps on Android devices, including Android Enterprise work profiles. Option A (macOS) is not an APP type—macOS is supported for configuration profiles and compliance, not app protection policies. Option C (Windows 10/11) is not an APP type either; Windows uses Windows Information Protection (WIP) rather than Intune APP. Option D (Web apps) is not an app protection policy type; web apps are managed through other Intune app types such as managed web links, not APP.

Answer

macOS

Answer

Windows 10/11

Answer

Web apps

Question 11

You are reviewing the Intune Win32 app configuration for FinanceApp. The app fails to install on a Windows 10 device running version 1809. The installation log shows no errors. What is the most likely reason?

Accepted Answer

The detection rule finds the finance.exe file already exists.. The app fails to install because the detection rule is configured to check for the existence of finance.exe. Since the file already exists on the device from a previous installation, Intune's detection logic determines the app is already installed and does not run the installation again. No errors appear because the installation process is never initiated. Option B is incorrect because the device runs Windows 10 version 1809, which meets the minimum release requirement (10.0.16299). Option C is incorrect because the install experience can be set to system regardless of enrollment type. Option D is incorrect because the install command line includes the silent switch as required.

Answer

The device does not meet the minimum Windows release requirement.

Answer

The install experience is set to system but the device is user enrolled.

Answer

The install command line is missing a silent switch.

Question 12

You are reviewing an iOS LOB app configuration in Intune. The app is assigned to a user group that includes both iPhone and iPad users. Users with iPhones report that the app does not appear in Company Portal. What is the most likely reason?

Accepted Answer

The app is configured to deploy only to iPads.. Intune allows administrators to configure iOS LOB apps with device-type restrictions, including a setting that limits deployment to iPads only. If this setting is enabled, the app will not appear in Company Portal for iPhone users, even though they are in the assigned user group. The app's assignment is based on user group membership, but device-level filtering prevents it from being visible on unsupported device types.

Answer

The bundle ID is incorrect for the app.

Answer

The build number is missing.

Answer

The app version is not specified.

Question 13

You need to deploy a web app to Android Enterprise work profile devices. The app is available in the Managed Google Play store. How should you make it available in Intune?

Accepted Answer

Add the app from Managed Google Play in Intune. When a web app is available in the Managed Google Play store, the proper method to make it available in Intune is to add it directly from the Managed Google Play console within the Intune admin center. This synchronizes the app's metadata and licensing with Intune, allowing you to assign it as Required or Available for Android Enterprise work profile devices without needing to upload an APK.

Answer

Upload the APK file to Intune

Answer

Direct users to Google Play to install

Answer

Sync device groups with Google Play

Question 14

Your organization uses Microsoft Defender for Endpoint. You need to ensure that all Windows devices have the Defender Antivirus platform update installed. Which Intune app type should you use?

Accepted Answer

Microsoft Defender for Endpoint app type. The Microsoft Defender for Endpoint app type in Intune is specifically designed to manage and deploy Defender platform updates, including the antivirus platform update, to Windows devices. This app type ensures that the Defender components are kept up to date through Intune's integration with the Microsoft Defender for Endpoint service, providing a streamlined update mechanism that other app types do not offer.

Answer

Windows app (Win32)

Answer

Microsoft 365 Apps for enterprise

Answer

Line-of-business app

Question 15

You are deploying a managed Google Play app to Android Enterprise fully managed devices. The app is not appearing in the work profile. What is the most likely reason?

Accepted Answer

The app is not approved in Managed Google Play. The most likely reason the app is not appearing is that it has not been approved in Managed Google Play. For Android Enterprise fully managed devices, apps must be approved in the Managed Google Play console before they can be deployed via Intune. Option B is incorrect because the work profile is not relevant for fully managed devices; they are corporate-owned and do not use work profiles. Option C is incorrect because the device must be enrolled in Intune, but if it is enrolled and the app is missing, lack of enrollment is not the most likely reason. Option D is incorrect because fully managed devices are associated with a managed Google account via the enrollment token, not a personal Google account.

Answer

The work profile is not enabled

Answer

The device is not enrolled in Intune

Answer

The device is not associated with a Google account