MD-102 Manage applications Practice Question
A company uses Microsoft Intune to manage Android Enterprise personally owned work profile devices. Employees report that the corporate email app allows copying text into personal apps on the same device. You need to prevent copy and paste of corporate data into personal apps while leaving personal apps otherwise unaffected. What should you configure?
⚠ Common exam trap
Test-takers frequently confuse device compliance or conditional access, which gate access to resources, with app protection policies that actually control data movement between apps.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
An app protection policy targeting the managed apps, with the 'Restrict cut, copy, and paste between other apps' setting configured for policy-managed apps.
App protection policies create a data boundary around managed apps, and the cut-copy-paste restriction setting specifically prevents corporate data from being pasted into unmanaged personal apps on Android Enterprise work profile devices while preserving personal app functionality.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
A conditional access policy requiring compliant devices for the corporate email app.
Why it's wrong here
Conditional access controls whether a user can access a cloud resource based on conditions such as device compliance or sign-in risk. It does not govern clipboard behavior inside an already-running app, so it cannot prevent copying corporate text into personal apps on the same device.
- ✗
A device compliance policy for Android Enterprise that marks devices as noncompliant when data sharing is detected.
Why it's wrong here
Compliance policies evaluate device conditions such as encryption or OS version and mark compliance state; they cannot intercept clipboard operations between apps. This configuration would not stop the copy and paste behavior and instead would only report a state that does not exist for clipboard activity.
- ✗
A device restrictions configuration profile that blocks the clipboard service on the Android device.
Why it's wrong here
Device restrictions profiles control device-level capabilities such as camera or screen capture, but they do not provide the app-to-app data boundary that app protection policies enforce. Blocking clipboard device-wide would break personal app usage too, which conflicts with the requirement to leave personal apps unaffected.
- ✓
An app protection policy targeting the managed apps, with the 'Restrict cut, copy, and paste between other apps' setting configured for policy-managed apps.
Why this is correct
App protection policies on Android Enterprise work profile devices govern data movement between managed and unmanaged apps, and the cut-copy-paste restriction blocks corporate data from leaving managed apps while leaving personal apps usable. This directly addresses the reported behavior without affecting the rest of the device.
Go deeper
Related to this question
Learn chapter
Configuring Compliance Policies
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.