MD-102 Manage applications Practice Test 8 — 15 Questions

Question 1

You are configuring an app protection policy in Microsoft Intune for iOS/iPadOS devices. Which setting can you enforce to prevent users from copying data from a managed app and pasting it into an unmanaged app?

Accepted Answer

Restrict cut, copy, and paste between other apps. Option A is correct because the 'Restrict cut, copy, and paste between other apps' setting controls data transfer. Option B is wrong because 'Prevent backup' does not restrict clipboard. Option C is wrong because 'Require PIN' is for access control. Option D is wrong because 'Block managed apps from running on jailbroken devices' is a device condition.

Answer

Require a PIN for access

Answer

Prevent iTunes and iCloud backups

Answer

Block managed apps from running on jailbroken devices

Question 2

Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to deploy a managed Google Play app to a device. The app appears in the managed Google Play store but the deployment status shows 'Failed'. What is the most likely cause?

Accepted Answer

The device is enrolled in a personally-owned work profile.. Option C is correct because managed Google Play apps require that the device is enrolled in corporate-owned work profile or fully managed mode. If the device is in personally-owned work profile, some apps may fail. Option A is wrong because Google Play Services are required for all Android devices. Option B is wrong because store access is controlled by policy. Option D is wrong because the app is in the managed store.

Answer

The device is not allowed to access the managed Google Play store.

Answer

The app is not approved in the managed Google Play store.

Answer

The device does not have Google Play Services installed.

Question 3

You are troubleshooting a Microsoft Intune app deployment for a Win32 app that is assigned as 'Available' to a user group. The user reports that the app does not appear in Company Portal. The user is a member of the assigned group. The device is enrolled and compliant. What should you check first?

Accepted Answer

Check if the app is added to Company Portal as a featured app.. Option B is correct because the app must be added to the Company Portal as a featured app or the user must browse to find it; if not visible, it may not be added. Option A is wrong because the app is assigned to the user group. Option C is wrong because the app is not required. Option D is wrong because detection rules are for installation, not visibility.

Answer

Review the app detection rules.

Answer

Confirm the app is assigned as 'Required' instead of 'Available'.

Answer

Verify the user is in the correct Azure AD group.

Question 4

You need to deploy a Microsoft 365 Apps for enterprise configuration (e.g., exclude specific apps) to Windows 10 devices via Intune. Which tool should you use to generate the configuration XML?

Accepted Answer

Office Customization Tool (OCT). Option A is correct because the Office Customization Tool is the official tool for creating configuration XML for Click-to-Run. Option B is wrong because the Microsoft 365 admin center is for user management. Option C is wrong because Group Policy Management Console is for on-premises. Option D is wrong because Intune does not generate XML.

Answer

Group Policy Management Console

Answer

Microsoft 365 admin center

Answer

Microsoft Intune admin center

Question 5

Which TWO of the following are valid app types in Microsoft Intune for deploying applications to Windows 10/11 devices?

Accepted Answer

Windows app (Win32). Options B and D are correct. Windows app (Win32) and Microsoft Store app (new) are valid app types. Option A is wrong because macOS is for Apple devices. Option C is wrong because Web link is a web app, not a Windows app type. Option E is wrong because Android store app is for Android.

Answer

Web link

Answer

macOS app

Answer

Android store app

Question 6

Which THREE of the following are requirements for deploying a Win32 app via Microsoft Intune?

Accepted Answer

The app must be assigned to a group of users or devices.. Options A, B, and D are correct. Win32 apps must be packed in the .intunewin format, have detection rules, and be assigned to groups. Option C is wrong because the app must be uploaded to Intune, not hosted externally. Option E is wrong because the Intune Management Extension handles Win32 app installation, not a separate agent.

Answer

The device must have the Intune Management Extension installed separately.

Answer

The app installation files must be hosted on an external web server.

Question 7

Which TWO of the following are types of app protection policies (APP) in Microsoft Intune?

Accepted Answer

iOS/iPadOS. Options A and B are correct. App protection policies can be configured for iOS/iPadOS and Android. Option C is wrong because there is no separate policy for Windows. Option D is wrong because there is no policy for macOS. Option E is wrong because there is no separate policy for web apps; web apps use the same policies if wrapped.

Answer

macOS

Answer

Windows 10/11

Answer

Web apps

Question 8

You are reviewing the Intune Win32 app configuration for FinanceApp. The app fails to install on a Windows 10 device running version 1809. The installation log shows no errors. What is the most likely reason?

Accepted Answer

The detection rule finds the finance.exe file already exists.. Option B is correct because the requirement rule specifies a minimum Windows release of 10.0.16299 (RS3/1709) but the device runs 1809 (10.0.17763) which meets the requirement, so it should install. However, the detection rule checks for the existence of finance.exe. If the file already exists from a previous installation, the detection rule will mark the app as installed, causing Intune to skip the installation. Option A is wrong because the requirement is met. Option C is wrong because the install experience is system. Option D is wrong because the command line is correct.

Answer

The device does not meet the minimum Windows release requirement.

Answer

The install experience is set to system but the device is user enrolled.

Answer

The install command line is missing a silent switch.

Question 9

You run the PowerShell command to check the assignment of a Microsoft Store app in Intune. The output shows 'intent: required' and 'target: allDevicesAssignmentTarget'. Which statement is true about this app?

Accepted Answer

The app will install automatically on all enrolled devices.. Option C is correct because 'allDevicesAssignmentTarget' means the app is assigned to all devices, not all users. Option A is wrong because it is assigned to all devices, not a specific group. Option B is wrong because it is required, not available. Option D is wrong because it is assigned to all devices, not just enrolled ones.

Answer

The app is assigned to a specific device group named 'All Devices'.

Answer

The app is only assigned to devices that have the Intune Management Extension.

Answer

The app is available for users to install from Company Portal.

Question 10

You are reviewing an iOS LOB app configuration in Intune. The app is assigned to a user group that includes both iPhone and iPad users. Users with iPhones report that the app does not appear in Company Portal. What is the most likely reason?

Accepted Answer

The app is configured to deploy only to iPads.. Option A is correct because the applicableDeviceType is set to iPad only, so iPhones are excluded. Option B is wrong because the bundle ID is set. Option C is wrong because version is set. Option D is wrong because build number is set.

Answer

The bundle ID is incorrect for the app.

Answer

The build number is missing.

Answer

The app version is not specified.

Question 11

Your organization uses Microsoft Intune to manage Windows 10 devices. Users report that some required applications are not being installed on their devices. You confirm the applications are assigned as 'Required' to a device group, and the devices are online. What is the most likely cause?

Accepted Answer

The Intune Management Extension is missing. Option C is correct because if the Intune Management Extension is not installed or running, PowerShell scripts and Win32 apps will not be processed. Option A is wrong because the BitLocker policy does not affect application installation. Option B is wrong because the user is not required to be logged in for device-targeted assignments. Option D is wrong because the enrollment status page does not block required app installs.

Answer

BitLocker encryption is pending

Answer

The user is not logged in to the device

Answer

The enrollment status page is blocking installation

Question 12

You are deploying a line-of-business (LOB) app to iOS devices managed by Intune. The app requires a specific configuration to access internal resources. Which approach should you use to deliver the configuration?

Accepted Answer

Create an App Configuration Policy targeting managed devices. Option A is correct because an App Configuration Policy for managed devices can deliver settings to LOB apps. Option B is wrong because VPP is for volume purchasing, not configuration. Option C is wrong because a custom profile might not apply to apps. Option D is wrong because app protection policies manage data protection, not app configuration.

Answer

Assign a custom device configuration profile

Answer

Deploy an App Protection Policy

Answer

Use Apple Volume Purchase Program (VPP) tokens

Question 13

A user reports that Microsoft 365 Apps for enterprise is not installing on their Windows 10 device. The app is assigned as 'Available' to the user group. What must the user do to trigger the installation?

Accepted Answer

Open the Company Portal app and install from there. Option B is correct because available app installs require user interaction via the Company Portal. Option A is wrong because the app is not required. Option C is wrong because the user can initiate install anytime. Option D is wrong because no restart is needed before install.

Answer

Wait for the next device sync

Answer

Restart the device

Answer

Log off and log back in

Question 14

Your organization plans to deploy a Win32 app to Windows 10 devices using Intune. The app requires the .NET Framework 4.8, which is not present on all devices. How should you handle this dependency?

Accepted Answer

Add a dependency in Intune for the .NET Framework. Option D is correct because Intune's dependency feature allows pre-installing required apps. Option A is wrong because prerequisites cannot be installed via detection rules. Option B is wrong because the MSI can include .NET, but if not, dependencies are the way. Option C is wrong because scripting dependencies is less reliable.

Answer

Include the .NET installer in the same package

Answer

Use a PowerShell script to install .NET before the app

Answer

Configure a detection rule for .NET

Question 15

You need to deploy a web app to Android Enterprise work profile devices. The app is available in the Managed Google Play store. How should you make it available in Intune?

Accepted Answer

Add the app from Managed Google Play in Intune. Option A is correct because you must add the app from Managed Google Play and then assign it. Option B is wrong because you cannot upload APKs directly for work profile. Option C is wrong because the app must be added to Intune first. Option D is wrong because there is no direct sync.

Answer

Upload the APK file to Intune

Answer

Direct users to Google Play to install

Answer

Sync device groups with Google Play