MD-102 Manage applications Practice Question
Exhibit
Refer to the exhibit.
{
"displayName": "Windows App Protection Policy",
"description": "Protection policy for managed apps",
"version": "1.0",
"enforcementLevel": 2,
"appGroupType": "All apps",
"settings": {
"dataTransfer": {
"orgRestriction": true,
"cutCopyAllowed": false,
"pasteAllowed": false
},
"encryption": {
"encryptAppData": true
},
"pin": {
"minLength": 4,
"requirePin": true
}
}
}Refer to the exhibit. You are reviewing an Intune app protection policy (APP) JSON for Windows. A user complains that they cannot copy data from a managed app. Which setting is causing this?
⚠ Common exam trap
Many candidates confuse `encryptAppData` with data protection controls, assuming encryption alone prevents data copying, when in fact encryption only secures data at rest and does not affect clipboard operations.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
cutCopyAllowed and pasteAllowed are set to false
The `cutCopyAllowed` and `pasteAllowed` settings directly control the ability to transfer data out of managed apps. When both are set to `false`, the Intune App Protection Policy (APP) for Windows explicitly blocks cut, copy, and paste operations from the managed app, which matches the user's complaint. Other settings like encryption, organizational restrictions, or PIN requirements do not prevent clipboard operations.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
encryptAppData is set to true
Why it's wrong here
Encrypts data, does not prevent copy.
- ✓
cutCopyAllowed and pasteAllowed are set to false
Why this is correct
Directly disables copy and paste.
- ✗
orgRestriction is set to true
Why it's wrong here
Restricts data transfer to org apps, not copy/paste.
- ✗
requirePin is set to true
Why it's wrong here
PIN requirement does not affect copy/paste.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.