MD-102 Manage and maintain devices Practice Question
You are troubleshooting a Windows 11 device that fails to install a required Win32 app deployed via Intune. Which THREE logs or locations should you review?
⚠ Common exam trap
Many candidates confuse the Intune Management Extension logs with the Windows Update log, assuming all app installations use the same logging mechanism, but Win32 apps rely solely on the IME agent, not Windows Update.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Intune Management Extension logs in %ProgramData%\Microsoft\IntuneManagementExtension\Logs
The Intune Management Extension (IME) is the agent responsible for processing Win32 app deployments on Windows 11 devices. Its logs, located in %ProgramData%\Microsoft\IntuneManagementExtension\Logs, provide detailed information about the download, detection, and installation phases of Win32 apps, making them the primary source for troubleshooting installation failures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows Update log (C:\Windows\WindowsUpdate.log)
Why it's wrong here
This log is for Windows updates, not Win32 apps.
- ✓
Intune Management Extension logs in %ProgramData%\Microsoft\IntuneManagementExtension\Logs
Why this is correct
These logs detail app installation attempts.
- ✓
The IntuneManagementExtension.log file in the agent directory.
Why this is correct
This log contains detailed error information.
- ✗
Windows Registry under HKLM\Software\Microsoft\Intune
Why it's wrong here
Registry keys store configuration, not logs.
- ✓
Windows Event Logs under Applications and Services Logs > Microsoft > Windows > AppLocker
Why this is correct
AppLocker logs may show blocked executions.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Win32 app
A Win32 app is a traditional Windows program that runs directly on a Windows PC, using the same system resources and displaying a standard window with menus and buttons.
Key term
Windows 11
Windows 11 is Microsoft's latest desktop operating system, offering a redesigned interface, enhanced security features, and improved support for modern hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.