MD-102 Manage applications Practice Test 8 — 15 Questions

Question 1

A user reports that a required Microsoft 365 Apps for enterprise installation failed on their Windows 11 device managed by Intune. The Intune console shows the app assignment is 'Required' for the user group. The device status shows 'Pending' for over a day. You verify the device is online and checks in regularly. What is the most likely cause?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

The user does not have a Microsoft 365 license assigned.. Microsoft 365 Apps for enterprise requires a valid license assigned to the user to install and activate. Intune's 'Pending' status indicates the installation is queued but cannot proceed, often due to license validation failure. Even though the device is online and checks in regularly, the app assignment will remain pending until the user has a license, as the Intune management extension waits for license confirmation before downloading and installing the suite.

Answer

The device has not checked in with Intune recently.

Answer

The device does not have enough disk space.

Answer

The app is assigned to the device group instead of the user group.

Question 2

You need to make a web app available to users in your organization through Microsoft Intune Company Portal. Which app type should you create in Intune?

Accepted Answer

Web app. To make a web app available through Microsoft Intune Company Portal, you must create a 'Web app' type. This app type allows you to add a link to a web application that users can access via the Company Portal, without needing to install a native client. Intune's Web app type supports both HTTP and HTTPS URLs and can be configured with a display name, URL, and icon for the Company Portal listing.

Answer

iOS store app

Answer

Windows app (Win32)

Answer

Android store app

Question 3

Your organization uses Microsoft Intune to manage devices. You need to deploy a custom Windows 10 line-of-business app that is not signed. Which action must you take on the target devices to allow installation?

Accepted Answer

Enable sideloading on the devices.. To install an unsigned line-of-business (LOB) app on Windows 10 via Intune, sideloading must be enabled on the target devices. Sideloading allows the installation of apps that are not signed by the Microsoft Store, which is required for custom LOB apps that lack a valid signature. This setting can be configured via a device configuration profile in Intune using the 'Allow sideloading of apps' policy.

Answer

Enable Developer Mode on the devices.

Answer

Add the app publisher to the trusted publisher store.

Answer

Turn off Windows Defender SmartScreen.

Question 4

A user on a Windows 11 device managed by Intune reports that a required Win32 app is not installing. The Intune console shows the app assignment is 'Required' and the device status is 'Error'. You review the detection rules and find that the app is detected by file version. The app installs successfully when run manually with admin rights. What is the most likely cause?

Accepted Answer

The detection rule is incorrectly matching an existing file version.. The detection rule uses file version to determine if the app is installed. If an existing file on the device already matches the version specified in the detection rule, Intune will consider the app as already installed and skip the installation, even though the required app is not actually present. This causes a mismatch where the console shows an error because the app assignment is 'Required' but the detection logic falsely reports success, preventing the installation from running.

Answer

The installation script returns a non-zero exit code.

Answer

The Intune Management Extension is not running.

Answer

The installation script fails in system context.

Question 5

You are configuring an app protection policy in Microsoft Intune for iOS/iPadOS devices. Which setting can you enforce to prevent users from copying data from a managed app and pasting it into an unmanaged app?

Accepted Answer

Restrict cut, copy, and paste between other apps. The 'Restrict cut, copy, and paste between other apps' setting in an Intune app protection policy (APP) for iOS/iPadOS directly controls data transfer between managed and unmanaged apps. When set to 'Blocked' or 'Policy Managed with Paste In', it prevents users from copying data from a managed app and pasting it into an unmanaged app, enforcing data leakage prevention at the OS clipboard level via the Intune MAM SDK.

Answer

Require a PIN for access

Answer

Prevent iTunes and iCloud backups

Answer

Block managed apps from running on jailbroken devices

Question 6

Your organization uses Microsoft Intune to manage Android Enterprise devices. You need to deploy a managed Google Play app to a device. The app appears in the managed Google Play store but the deployment status shows 'Failed'. What is the most likely cause?

Accepted Answer

The device does not have Google Play Services installed.. The most likely cause of a 'Failed' deployment status for a managed Google Play app is that the device does not have Google Play Services installed. Google Play Services is a prerequisite for accessing and installing apps from the managed Google Play store. Without it, the device cannot complete the deployment, even if the app is approved and the device is enrolled correctly. Option A is incorrect because personally-owned work profiles do support app deployment; the failure is not inherently due to the profile type.

Answer

The device is enrolled in a personally-owned work profile.

Answer

The device is not allowed to access the managed Google Play store.

Answer

The app is not approved in the managed Google Play store.

Question 7

You need to deploy a Microsoft 365 Apps for enterprise configuration (e.g., exclude specific apps) to Windows 10 devices via Intune. Which tool should you use to generate the configuration XML?

Accepted Answer

Office Customization Tool (OCT). The Office Customization Tool (OCT) is the correct tool because it generates the configuration XML file (configuration.xml) that Intune uses to control Microsoft 365 Apps for enterprise deployments, including excluding specific apps like Access or Publisher. Intune's built-in Office deployment integration relies on this XML to define installation settings, and the OCT is the official Microsoft tool designed for this purpose.

Answer

Group Policy Management Console

Answer

Microsoft 365 admin center

Answer

Microsoft Intune admin center

Question 8

Which TWO of the following are valid app types in Microsoft Intune for deploying applications to Windows 10/11 devices?

Accepted Answer

Windows app (Win32). Win32 apps are a primary app type in Microsoft Intune for deploying traditional desktop applications (e.g., .exe, .msi) to Windows 10/11 devices. Intune uses the Intune Management Extension to install and manage Win32 apps, supporting detection rules, dependencies, and supersedence.

Answer

Web link

Answer

macOS app

Answer

Android store app

Question 9

Which THREE of the following are requirements for deploying a Win32 app via Microsoft Intune?

Accepted Answer

The app must be assigned to a group of users or devices.. In Microsoft Intune, a Win32 app must be assigned to at least one group of users or devices to be deployed. Without an assignment, the Intune Management Extension will not receive the policy to download and install the application on the targeted devices.

Answer

The device must have the Intune Management Extension installed separately.

Answer

The app installation files must be hosted on an external web server.

Question 10

Which TWO of the following are types of app protection policies (APP) in Microsoft Intune?

Accepted Answer

iOS/iPadOS. In Microsoft Intune, app protection policies (APP) are designed to manage and protect app data on devices that may or may not be enrolled in MDM. The two supported mobile platforms for APP are iOS/iPadOS and Android, as these platforms allow granular control over app-level data through Intune SDK-integrated apps or managed browsers.

Answer

macOS

Answer

Windows 10/11

Answer

Web apps

Question 11

You are reviewing the Intune Win32 app configuration for FinanceApp. The app fails to install on a Windows 10 device running version 1809. The installation log shows no errors. What is the most likely reason?

Accepted Answer

The detection rule finds the finance.exe file already exists.. The app fails to install because the detection rule is configured to check for the existence of finance.exe. Since the file already exists on the device from a previous installation, Intune's detection logic determines the app is already installed and does not run the installation again. No errors appear because the installation process is never initiated. Option B is incorrect because the device runs Windows 10 version 1809, which meets the minimum release requirement (10.0.16299). Option C is incorrect because the install experience can be set to system regardless of enrollment type. Option D is incorrect because the install command line includes the silent switch as required.

Answer

The device does not meet the minimum Windows release requirement.

Answer

The install experience is set to system but the device is user enrolled.

Answer

The install command line is missing a silent switch.

Question 12

You run the PowerShell command to check the assignment of a Microsoft Store app in Intune. The output shows 'intent: required' and 'target: allDevicesAssignmentTarget'. Which statement is true about this app?

Accepted Answer

The app will install automatically on all enrolled devices.. The output shows 'intent: required' and 'target: allDevicesAssignmentTarget'. In Intune, 'intent: required' means the app is mandatory and will install automatically without user intervention. 'target: allDevicesAssignmentTarget' indicates the assignment applies to all enrolled devices, not a specific group. Therefore, the app will install automatically on every enrolled device, making option B correct.

Answer

The app is assigned to a specific device group named 'All Devices'.

Answer

The app is only assigned to devices that have the Intune Management Extension.

Answer

The app is available for users to install from Company Portal.

Question 13

You are reviewing an iOS LOB app configuration in Intune. The app is assigned to a user group that includes both iPhone and iPad users. Users with iPhones report that the app does not appear in Company Portal. What is the most likely reason?

Accepted Answer

The app is configured to deploy only to iPads.. Intune allows administrators to configure iOS LOB apps with device-type restrictions, including a setting that limits deployment to iPads only. If this setting is enabled, the app will not appear in Company Portal for iPhone users, even though they are in the assigned user group. The app's assignment is based on user group membership, but device-level filtering prevents it from being visible on unsupported device types.

Answer

The bundle ID is incorrect for the app.

Answer

The build number is missing.

Answer

The app version is not specified.

Question 14

Your organization uses Microsoft Intune to manage Windows 10 devices. Users report that some required applications are not being installed on their devices. You confirm the applications are assigned as 'Required' to a device group, and the devices are online. What is the most likely cause?

Accepted Answer

The Intune Management Extension is missing. The Intune Management Extension is required to process Win32 app installations. If the extension is missing or not running, required apps will not install even though the device is online and assignment is configured. Option A is wrong because BitLocker encryption status does not affect app installation. Option B is wrong because device-targeted assignments do not require the user to be logged in. Option C is wrong because the enrollment status page does not block required app installations after enrollment is complete.

Answer

BitLocker encryption is pending

Answer

The user is not logged in to the device

Answer

The enrollment status page is blocking installation

Question 15

You are deploying a line-of-business (LOB) app to iOS devices managed by Intune. The app requires a specific configuration to access internal resources. Which approach should you use to deliver the configuration?

Accepted Answer

Create an App Configuration Policy targeting managed devices. An App Configuration Policy targeting managed devices is the correct approach because it allows you to supply XML or JSON settings directly to the LOB app on iOS devices enrolled in Intune. This policy is applied when the app runs, enabling it to access internal resources without requiring a separate device profile or user interaction.

Answer

Assign a custom device configuration profile

Answer

Deploy an App Protection Policy

Answer

Use Apple Volume Purchase Program (VPP) tokens