MD-102 Manage and maintain devices Practice Question
You need to deploy a line-of-business (LOB) iOS app to company-owned devices using Microsoft Intune. The app is signed with an enterprise certificate. Which deployment method should you use?
⚠ Common exam trap
Candidates often confuse LOB app deployment with VPP apps, mistakenly thinking that any app not from the public store must use VPP, but VPP is only for App Store apps, while LOB apps are for enterprise-signed .ipa files uploaded directly to Intune.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
iOS/iPadOS LOB app.
An iOS/iPadOS LOB app deployment in Intune is specifically designed for line-of-business apps that are signed with an enterprise certificate and distributed internally. This method allows you to upload the .ipa file directly to Intune and deploy it to company-owned devices without requiring the Apple App Store or a Volume Purchase Program.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Managed Browser app.
Why it's wrong here
Managed Browser is a container app for restricting web access, not an app package delivery mechanism, so it cannot install an enterprise-signed LOB binary. It tempts because it is an Intune app type listed alongside others; it would be correct when the requirement is secured browsing rather than deploying custom software.
- ✓
iOS/iPadOS LOB app.
Why this is correct
iOS/iPadOS LOB app deployment handles enterprise-signed packages (.ipa) directly, satisfying the requirement to distribute a signed line-of-business app to company-owned devices. Intune pushes it via the Company Portal without App Store involvement, and the enterprise certificate is trusted through a configuration profile. Store apps and web clips cannot deploy custom enterprise-signed binaries.
- ✗
iOS/iPadOS store app.
Why it's wrong here
Store apps are published through Apple's App Store and signed by Apple's distribution certificate, so an enterprise-signed LOB binary cannot be delivered this way. It tempts because store deployment suits publicly available commercial apps; here the app is private and enterprise-signed, requiring the LOB app type instead.
- ✗
Volume Purchase Program (VPP) app.
Why it's wrong here
VPP distributes App Store apps through Apple Business Manager with licence assignment, and cannot deliver an enterprise-signed LOB binary. It tempts because VPP handles volume licensing for purchased store apps; it would be correct for deploying commercial apps at scale, not custom enterprise-signed packages.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
App deployment
App deployment is the process of making a software application available for use by end users, often involving distribution, installation, configuration, and updates across multiple devices or servers.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 556-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.