MD-102 Manage applications Practice Test 6 — 15 Questions

Question 1

Refer to the exhibit. You query Microsoft Graph API and receive this JSON for a managed device. App2 installation failed. The app is a Win32 app deployed as required. The device is compliant and enrolled via MDM. What is the most likely reason for the failure?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The Intune Management Extension is not installed.. Win32 apps deployed as required require the Intune Management Extension (IME) to be present on the device for installation. Since the device is enrolled via MDM and compliant, but the app installation failed, the most likely cause is that the IME is missing or not functioning. The IME handles Win32 app deployment, detection, and remediation, and without it, required Win32 apps cannot install.

Answer

The app is not assigned to the user.

Answer

The app version is incompatible with the device OS.

Answer

The device is not compliant.

Question 2

Refer to the exhibit. You deploy this ARM template to create an Intune configuration policy for macOS devices. The policy sets the 'com.apple.ManagedClient.appstore' setting to true. What is the expected behavior on the target macOS devices?

Accepted Answer

Users will be allowed to install apps from the App Store.. Setting 'com.apple.ManagedClient.appstore' to true in an Intune macOS configuration policy explicitly allows users to install apps from the App Store. This key controls the 'allow app store app installation' restriction; when true, the restriction is disabled, meaning users can install apps from the App Store. The policy does not affect automatic updates or restrict installation to only Apple Business Manager purchases.

Answer

App Store updates will be automatically installed.

Answer

Only apps purchased through Apple Business Manager will be installable.

Answer

Users will be blocked from installing apps from the App Store.

Question 3

You need to deploy a line-of-business app to 100 Windows 10 devices that are managed by Microsoft Intune. The app installer is a .msi file. Which app type should you select when adding the app in Microsoft Intune?

Accepted Answer

Windows app (Win32). D is correct because Win32 app management in Intune supports deploying traditional desktop applications, including .msi files, to Windows 10 devices. Win32 apps can be assigned to devices managed by Intune and allow for complex installation commands, detection rules, and dependencies, making them suitable for line-of-business apps that require full control over the installation process.

Answer

Microsoft Store app (Windows)

Answer

Windows app (Line-of-business)

Answer

Web link

Question 4

Contoso uses Intune to manage iOS/iPadOS devices. You need to ensure that only approved apps from the Microsoft Store can be installed on corporate devices. What should you configure?

Accepted Answer

iOS/iPadOS App Configuration policies. To ensure only approved apps from the Microsoft Store can be installed on corporate iOS/iPadOS devices, configure a Device restrictions policy (Device configuration profile) with settings such as blocking the App Store or allowing only managed apps. App Configuration policies cannot restrict app installation; they only supply app-specific settings.

Answer

App Protection Policies (APP)

Answer

Device Compliance policies

Answer

Managed App Policies (MAM)

Question 5

You need to deploy an Android Enterprise app to corporate-owned work profile devices. The app is available on Google Play. Which deployment method should you use?

Accepted Answer

Managed Google Play. Managed Google Play is the correct deployment method for Android Enterprise corporate-owned work profile devices because it provides a curated, enterprise-specific app catalog that integrates directly with Intune. Google Play hosts the app, and Intune uses Managed Google Play to approve, deploy, and manage apps on these devices without requiring user interaction.

Answer

Microsoft Store for Business

Answer

Apple Business Manager

Answer

Side-loading via Intune

Question 6

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a custom .pkg app to all macOS devices. What app type should you create in Intune?

Accepted Answer

macOS app (line-of-business). To deploy a custom .pkg app to macOS devices via Microsoft Intune, you must create a macOS line-of-business (LOB) app. LOB apps are designed for sideloading custom or in-house applications that are not available in the public app store, and Intune supports .pkg and .dmg formats for macOS LOB deployment. This app type allows you to upload the .pkg file directly and assign it to devices, handling installation through the Intune management agent.

Answer

Windows app (Win32)

Answer

Web link

Answer

iOS app (line-of-business)

Question 7

You have an Intune-managed Windows 10 device that is not receiving app updates. The app was deployed as a Win32 app with a detection rule. You verify that the device is online and the Intune Management Extension is running. What should you check first?

Accepted Answer

The app assignment schedule is configured to update.. The app update frequency is controlled by the app assignment schedule. Option D is correct because Win32 apps in Intune update based on the assignment schedule; if it is not configured to update, the app will not receive updates. Option A is incorrect because detection rules are used for installation detection, not update scheduling. Option B is incorrect because even if the app is assigned as 'Required', updates only occur if the schedule allows. Option C is incorrect because the Intune Management Extension being up to date does not control update frequency.

Answer

The detection rule is set to 'File exists'.

Answer

The app is assigned as 'Required' in the assignment.

Answer

The Intune Management Extension is up to date.

Question 8

You need to enable users to install company apps from a private store on their iOS devices. Which Microsoft Intune feature should you use?

Accepted Answer

Volume Purchase Program (VPP). The Volume Purchase Program (VPP) is the correct feature because it allows organizations to purchase app licenses in bulk from Apple and distribute them to users' iOS devices through a private store. By integrating VPP with Microsoft Intune, you can assign licensed apps to users or devices, enabling them to install company-approved apps from a private store without requiring an Apple ID or personal payment.

Answer

Mobile Application Management (MAM) policies

Answer

Certificate profiles

Answer

Company Portal app

Question 9

A user reports that a required app is not installing on their Android Enterprise device. The device is enrolled in Intune and shows as compliant. The app is assigned to the user. What is the most likely cause?

Accepted Answer

The user does not have the Company Portal app installed.. On Android Enterprise devices enrolled in Intune, the Company Portal app is required to install line-of-business (LOB) apps or manage app installations via the Intune console. Without the Company Portal app, the device cannot receive app assignment push notifications or initiate the installation process, even if the device is compliant and the app is assigned to the user. This is a prerequisite for app deployment on Android Enterprise work profiles.

Answer

The device is not compliant with conditional access policies.

Answer

The app is not available on Managed Google Play.

Answer

The device does not have a work profile configured.

Question 10

You are deploying a Win32 app that requires administrator privileges to install. The app runs on Windows 11 devices. How should you configure the app in Intune to ensure it installs with elevated privileges?

Accepted Answer

Set the app install behavior to 'System'.. Setting the install behavior to 'System' in Intune for a Win32 app ensures the installer runs with the SYSTEM account, which inherently has administrator privileges. This is required for apps that demand elevated rights during installation, as the SYSTEM account bypasses user account control (UAC) and can write to protected system locations like Program Files or the registry.

Answer

Set the app to run in user context.

Answer

Use a PowerShell script to run the installer.

Answer

Configure a detection rule to check for admin rights.

Question 11

Which TWO of the following are supported app types for deploying to iOS devices via Microsoft Intune?

Accepted Answer

iOS line-of-business app. iOS store apps and iOS line-of-business apps are supported. Web links are for any device but not an app type. Win32 and Android are not for iOS.

Answer

Web link

Answer

Android app

Answer

Win32 app

Question 12

Which FOUR of the following are valid detection rules for a Win32 app in Intune?

Accepted Answer

PowerShell script (custom detection). For Win32 apps in Intune, the valid detection rules are: PowerShell script (custom detection), MSI product code, Registry (key or value exists), and File system (file or folder exists). Network share access is not a detection rule. Therefore, options A, B, C, and D are correct.

Answer

Network share access

Question 13

Which TWO of the following are methods to deploy apps to Windows 10/11 devices via Microsoft Intune?

Accepted Answer

Microsoft Store app. The correct answers are C and E. Option C is correct because Microsoft Intune supports deploying Microsoft Store apps (including Store for Business and the new Microsoft Store experience) to Windows 10/11 devices. Intune can synchronize apps from the Microsoft Store and assign them to users or devices. Option E is correct because Intune also supports deploying Win32 apps (traditional .exe and .msi applications) to Windows devices using the Win32 app management feature, which allows packaging and deploying line-of-business applications. Options A, B, and D are incorrect: iOS and Android apps are platform-specific and cannot be deployed to Windows devices via Intune; a web link is not an app deployment method but a shortcut.

Answer

iOS app

Answer

Web link

Answer

Android app

Question 14

You are reviewing the Intune Win32 app configuration for Microsoft Edge. The app is deployed to Windows 10 devices. Users report that Edge is not being installed on some devices. What is the most likely issue with the detection rule?

Accepted Answer

The detection rule requires an exact version match, which may not match if a different version is installed.. The most likely issue is that the detection rule is configured to require an exact version match. If a device already has a different version of Microsoft Edge installed (e.g., a newer or older build), Intune will evaluate the detection rule as 'not detected' and attempt to reinstall the app, which may fail or be skipped because the installer detects an existing version. This is a common misconfiguration in Win32 app deployments where version-specific detection rules cause false negatives.

Answer

The uninstall command is incorrect.

Answer

The install command is missing the --silent flag.

Answer

The detection rule is checking the 32-bit registry on a 64-bit system.

Question 15

Refer to the exhibit. You are deploying a line-of-business app to Windows 10 devices. The JSON shows the app configuration in Microsoft Graph. Which of the following is true about this deployment?

Accepted Answer

The app will install in system context.. The JSON configuration includes the 'installExperience' property set to 'system', which means the app will be installed in the system context (as SYSTEM account) rather than per-user. This is typical for line-of-business apps deployed via Microsoft Intune, ensuring the app is available to all users on the device and can perform system-level operations without user interaction.

Answer

The device will restart automatically after installation.

Answer

The app will only install if the product code matches.

Answer

The app will be installed from the Microsoft Store for Business.