MD-102 Manage applications Practice Question
You are deploying a line-of-business (LOB) app to iOS devices managed by Intune. The app requires a specific configuration to access internal resources. Which approach should you use to deliver the configuration?
⚠ Common exam trap
A common mix-up: candidates confuse App Configuration Policies (which deliver app-specific settings) with App Protection Policies (which enforce data protection), leading them to select Option C incorrectly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an App Configuration Policy targeting managed devices
An App Configuration Policy targeting managed devices is the correct approach because it allows you to supply XML or JSON settings directly to the LOB app on iOS devices enrolled in Intune. This policy is applied when the app runs, enabling it to access internal resources without requiring a separate device profile or user interaction.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Assign a custom device configuration profile
Why it's wrong here
A custom device configuration profile applies settings at the device level, not to a specific iOS app, so it cannot inject the app's required configuration. It is tempting because it is the standard Intune mechanism for device settings, and would be correct for Wi-Fi, VPN or restrictions rather than per-app configuration.
- ✓
Create an App Configuration Policy targeting managed devices
Why this is correct
An App Configuration Policy for managed devices pushes key-value settings to the app via the Intune MDM channel, so the LOB app receives its internal-resource configuration without repackaging. This satisfies the stem's requirement to deliver configuration to managed iOS devices.
- ✗
Deploy an App Protection Policy
Why it's wrong here
App Protection Policies govern data handling within apps, such as cut, copy and save restrictions, and cannot supply app configuration values. It is tempting because it targets managed apps, and would be correct for protecting corporate data on personal devices rather than delivering internal resource settings.
- ✗
Use Apple Volume Purchase Program (VPP) tokens
Why it's wrong here
VPP tokens license and purchase apps for distribution through Intune; they carry no configuration payload. It is tempting because VPP is integral to iOS app deployment, and would be correct for acquiring and assigning App Store apps, not for supplying the settings the LOB app needs.
Go deeper
Related to this question
Learn chapter
Updating Devices with Windows Update for Business
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.