MD-102 Manage applications Practice Test 7 — 15 Questions

Question 1

Refer to the exhibit. You are deploying a line-of-business iOS app. Which statement is correct about this app?

Accepted Answer

The app will expire on December 31, 2025.. The exhibit shows the app's expiration date is set to December 31, 2025, under the 'Expiration date' field. In Microsoft Intune, when you configure a line-of-business (LOB) iOS app, you can specify an expiration date; after that date, the app will be blocked from installation or launch. Therefore, option C is correct because the app will expire on that date.

Answer

The app requires iOS 15.0 or later.

Answer

The app can only be installed on iPads.

Answer

The app has no expiration date.

Question 2

An organization uses Microsoft Intune to manage iOS devices. They need to deploy an internal line-of-business (LOB) app that is signed with an enterprise certificate. The app must be available to users who are members of a dynamic Microsoft Entra ID group. Which deployment method should you use?

Accepted Answer

Assign the LOB app as 'Available' to the dynamic group. Deploying an internal LOB app signed with an enterprise certificate as 'Available' to a dynamic Microsoft Entra ID group allows users to install the app on demand from the Company Portal, while still targeting the group dynamically. This method supports enterprise-signed apps without requiring a VPP token, and 'Available' assignments are the only way to make the app visible in the Company Portal for optional installation by dynamic group members.

Answer

Use a VPP token to deploy the app

Answer

Configure a managed open-in policy

Answer

Assign the LOB app as 'Required' to the dynamic group

Question 3

Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to deploy a Microsoft 365 Apps for Enterprise to work profiles. Which app type should you select in Intune?

Accepted Answer

Managed Google Play app. For deploying Microsoft 365 Apps for Enterprise to Android Enterprise work profiles, the correct app type is Managed Google Play app. Intune integrates with Managed Google Play to distribute approved apps to work profiles, ensuring compliance with Android Enterprise policies. Web apps, system apps, and line-of-business apps cannot deliver the full Microsoft 365 suite with managed configuration and app protection policies in a work profile context.

Answer

Web app

Answer

Android Enterprise system app

Answer

Line-of-business app

Question 4

A company uses Microsoft Intune to manage Windows 11 devices. They want to deploy a Win32 app that requires user interaction during installation. The app must be installed with administrative privileges. Which installation behavior setting should you configure?

Accepted Answer

System context (device). The correct setting is 'System context (device)' because the app must be installed with administrative privileges. In Intune, the 'System' installation behavior runs the installer as the SYSTEM account, which inherently has administrative privileges. While this context does not allow user interaction, the requirement for admin privileges takes precedence. If user interaction were absolutely necessary, a different installation method (such as running the installer in user context with self-elevation) would be required, but the question asks for the installation behavior setting that provides administrative privileges, which is System context.

Answer

Installation time (64-bit vs 32-bit)

Answer

Device restart behavior

Answer

User context (user)

Question 5

Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a PKG app that requires reboot. Which app type should you select?

Accepted Answer

macOS LOB app. A macOS LOB (line-of-business) app type is required because Intune uses this type to deploy PKG files that can include installation scripts and handle reboots. The LOB app type supports the .pkg format natively and allows Intune to manage the installation lifecycle, including required reboots, through the Intune management agent on macOS.

Answer

macOS web app

Answer

Microsoft 365 for macOS

Answer

macOS DMG app

Question 6

A company uses Microsoft Intune to manage devices. They need to ensure that a critical line-of-business app is updated automatically on all devices. Which assignment type should they use?

Accepted Answer

Required. The Required assignment type in Microsoft Intune automatically installs and updates apps on managed devices without user interaction, making it the correct choice for ensuring a critical line-of-business app is updated automatically. This assignment enforces the app deployment policy by pushing the update to devices during their next check-in with the Intune service, typically within 8 hours.

Answer

End-user notification

Answer

Uninstall

Answer

Available for enrolled devices

Question 7

Your organization uses Microsoft Intune to manage Windows 10 devices. They deploy a Win32 app using detection rules. The app installs but the detection rule incorrectly reports failure, causing repeated installation attempts. What is the best way to resolve this?

Accepted Answer

Update the detection rule to accurately reflect installed state. The detection rule is the mechanism Intune uses to determine whether a Win32 app is already installed. If the rule incorrectly reports failure despite successful installation, Intune will repeatedly attempt to reinstall the app. Updating the detection rule to accurately reflect the installed state (e.g., checking for the correct file, registry key, or version) stops the unnecessary reinstall loop without requiring manual intervention or reconfiguration of the deployment.

Answer

Uninstall and redeploy the app

Answer

Reinstall the app manually

Answer

Modify the installation command to suppress output

Question 8

A company uses Microsoft Intune to manage Android Enterprise personally-owned work profile devices. They need to deploy a managed app that restricts data transfer between work and personal profiles. Which app configuration policy should they use?

Accepted Answer

Managed app configuration policy. For Android Enterprise personally-owned work profile devices, a managed app configuration policy (option B) is used to deploy managed apps with specific settings, such as restricting data transfer between the work and personal profiles. This policy applies configuration keys directly to the app at runtime, enabling controls like copy/paste restrictions or data sharing boundaries without requiring device-level enforcement.

Answer

Compliance policy

Answer

App protection policy

Answer

Device configuration policy

Question 9

Your organization needs to deploy a web app link to users' devices via Microsoft Intune. Which app type should you select?

Accepted Answer

Web link. C is correct because a Web link app type in Microsoft Intune allows you to deploy a shortcut to a web app on users' devices without installing any software. This is ideal for linking to a web app that runs in a browser, as it simply places an icon on the device's app list or home screen that opens the specified URL.

Answer

Windows app (Win32)

Answer

iOS store app

Answer

Managed Google Play app

Question 10

Refer to the exhibit. An administrator retrieves a list of Win32 apps. They notice that one app shows installExperience as 'system' and detectionRules as 'fileVersion' with version '1.0.0'. The app fails to install on some devices. The event viewer on a failing device shows 'The app was installed but detection rule did not match'. What is the most likely cause?

Accepted Answer

The detection rule expects version 1.0.0 but the installed version is different. The detection rule is configured to check for file version '1.0.0', but the installed version on the failing device does not match this value. When Intune deploys a Win32 app, it uses the detection rule to verify successful installation; if the rule does not match, the app is marked as failed even though the installation itself completed. This mismatch is the most likely cause of the event viewer message.

Answer

The PowerShell cmdlet is deprecated

Answer

The installExperience should be 'user' instead of 'system'

Answer

The app requires a reboot that is not handled

Question 11

Refer to the exhibit. An Intune admin configures the above Windows Update for Business policy. Users report that quality updates are not being installed until 7 days later than expected. What is the likely reason?

Accepted Answer

Quality updates are deferred by 7 days. QualityUpdateDeferralPeriodInDays is set to 7, which defers updates by 7 days. This is the intended behavior; no issue. However, the question implies users think updates are late. The policy is correct; perhaps users misunderstand. But the question asks for likely reason. The deferral period is 7 days, so updates are intentionally deferred. The update notification level is default. Feature updates deferred 30 days. No pause. So the quality update deferral is the cause.

Answer

Quality updates are paused

Answer

Feature updates are deferred by 30 days

Answer

Update notifications are set to default

Question 12

Refer to the exhibit. A KQL query is run in Microsoft Defender XDR for a device 'WIN10-PC'. The results show that a critical line-of-business app 'ContosoApp' version '2.0.0' has InstallationResult 'Failed' with ErrorCode '0x80073CF6'. What does this error code typically indicate?

Accepted Answer

The app package is not signed correctly. Error code 0x80073CF6 in Microsoft Defender XDR corresponds to APPX_E_CORRUPT_CONTENT, which indicates that the app package's digital signature is invalid or the package content has been tampered with. This typically occurs when the .appx or .msix package is not signed correctly or the signature does not match the package contents, preventing installation on Windows 10/11 devices.

Answer

The device does not have internet connectivity

Answer

The user does not have permission to install apps

Answer

The device has insufficient disk space

Question 13

Which TWO of the following can be used to deploy Microsoft 365 Apps to Windows devices managed by Microsoft Intune? (Select TWO.)

Accepted Answer

Intune built-in 'Microsoft 365 Apps for Windows 10 and later' app type. Both B and E are correct. The Intune built-in 'Microsoft 365 Apps for Windows 10 and later' app type (B) provides the native deployment mechanism within Intune. The Microsoft 365 Apps admin center (E) is used to configure the deployment settings (e.g., update channel, languages, architecture), which are then applied when the Intune app type is assigned to devices. Together, they enable the deployment of Microsoft 365 Apps to Windows devices managed by Intune.

Answer

Configuration Manager

Answer

Group Policy

Answer

Win32 app wrapper

Question 14

Which THREE of the following are valid detection rule types for a Win32 app in Microsoft Intune? (Select THREE.)

Accepted Answer

MSI product code. MSI product code detection rules allow Intune to verify the presence of a Win32 app by checking the Windows Installer (MSI) product code in the registry (HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall). This is a native detection method that directly confirms the application's installation state without requiring custom scripts.

Answer

Windows feature

Answer

DNS query

Question 15

Which TWO of the following are required to deploy an iOS line-of-business app via Microsoft Intune? (Select TWO.)

Accepted Answer

iOS app package file (.ipa). An .ipa file is the app package. A provisioning profile is needed for app installation. An MDM push certificate is for device management, not app deployment. A VPP token is for volume purchasing. A signing certificate is needed for development, but the provisioning profile includes signing info. So the two required are .ipa and provisioning profile.

Answer

Apple Developer signing certificate

Answer

Volume purchase program (VPP) token

Answer

MDM push certificate