MD-102 Manage and maintain devices Practice Question
You are configuring app protection policies (MAM) in Microsoft Intune for iOS devices. Which THREE settings can you configure to prevent data leakage?
⚠ Common exam trap
It's easy for candidates to confuse device-level restrictions (like blocking screenshots or requiring a device PIN) with MAM app protection policy settings, but MAM policies only control app-level behaviors and cannot enforce hardware-level or OS-level restrictions like screenshots or device PINs.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Restrict web content transfer to managed browsers.
Restricting web content transfer to managed browsers ensures that corporate data opened via web links can only be viewed in browsers that support Intune MAM policies (e.g., Microsoft Edge). This prevents data from being opened in unmanaged browsers where app protection policies cannot enforce data leakage controls, such as preventing copy/paste or requiring encryption.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Require device PIN.
Why it's wrong here
Device PIN is a device compliance setting, not app protection.
- ✓
Restrict web content transfer to managed browsers.
Why this is correct
Ensures web links open in managed browsers.
- ✓
Restrict cut, copy, and paste between apps.
Why this is correct
This setting prevents data transfer via clipboard.
- ✓
Prevent 'Save as' to local storage.
Why this is correct
This prevents saving corporate data to personal locations.
- ✗
Block screenshots of corporate data.
Why it's wrong here
Not a configurable setting in app protection policies.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
MAM
Mobile Application Management (MAM) is a set of technologies and policies that allow IT administrators to manage and secure corporate applications on mobile devices without managing the entire device.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.