MD-102 Manage applications Practice Question
You are configuring a Windows 10 kiosk device using Intune. The device should run a single-store app in full-screen mode. Which Intune policy type should you use?
⚠ Common exam trap
Watch out — candidates often confuse 'device restrictions' (which can block apps) with the dedicated 'Kiosk' settings profile, which is the only Intune policy type that enforces the full-screen, single-app, locked-down experience required for a kiosk device.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
A device configuration profile using the 'Kiosk' settings for single-app mode
A is correct because Intune's device configuration profile includes a 'Kiosk' settings category specifically designed for Windows 10/11 devices. When you select 'Single-app mode' under kiosk settings, you can specify a single Store app (e.g., a UWP or Win32 app) that will run in full-screen, locked-down mode, preventing users from accessing any other system functions or apps.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
A device configuration profile using the 'Kiosk' settings for single-app mode
Why this is correct
A device configuration profile with the Kiosk settings configured for single-app mode assigns the store app as the sole full-screen experience on the Windows 10 device, satisfying the single-app kiosk constraint directly through Intune's built-in kiosk configuration.
- ✗
A device restrictions profile blocking access to other apps
Why it's wrong here
A device restrictions profile blocks apps but does not launch or pin the single-store app in full-screen mode, so the kiosk never presents it. Restrictions profiles suit hardening a general-purpose device, not dedicated single-app kiosk presentation.
- ✗
A compliance policy requiring the app to be installed
Why it's wrong here
A compliance policy only evaluates and reports device state; it cannot launch or pin an app into full-screen mode. It is tempting because compliance policies do verify app installation, which suits conditional access gating, but kiosk single-app behaviour requires a dedicated assigned-access or kiosk configuration profile.
- ✗
A configuration profile for Microsoft Edge in kiosk mode
Why it's wrong here
An Edge kiosk configuration profile launches Microsoft Edge, not an arbitrary single-store app, so it cannot present the required application full-screen. It is the right choice when the kiosk's sole purpose is a locked-down browsing experience.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Device configuration
Device configuration is the process of setting up and customizing the operating system, security policies, applications, and network settings on a device so it can securely connect to and function within an organization's IT environment.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.