MD-102 Protect devices Practice Question
You need to deploy a line-of-business (LOB) iOS app to users in your organization. The app is signed with an enterprise certificate. How should you distribute the app to managed devices?
⚠ Common exam trap
Many exam-takers confuse Apple Business Manager (which handles App Store and custom B2B apps) with Intune's LOB app deployment, mistakenly thinking ABM can distribute enterprise-signed apps, when in fact ABM requires apps to be purchased or assigned through Apple's Volume Purchase Program (VPP) and does not support direct upload of enterprise-signed .ipa files.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Add the app as an iOS/iPadOS line-of-business app in Microsoft Intune and assign it to users.
Microsoft Intune supports deploying enterprise-signed LOB apps directly as iOS/iPadOS line-of-business apps. This method allows administrators to upload the .ipa file to Intune and assign it to managed devices without requiring the Apple App Store or Apple Business Manager, as long as the devices are enrolled in MDM and the enterprise certificate is trusted on the devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Upload the app to Intune and provide a signing certificate.
Why it's wrong here
The app is already signed; no additional certificate needed.
- ✗
Publish the app to the Apple App Store and assign it as a required app.
Why it's wrong here
The app is LOB, not public.
- ✓
Add the app as an iOS/iPadOS line-of-business app in Microsoft Intune and assign it to users.
Why this is correct
This is the correct method for enterprise-signed LOB apps.
- ✗
Use Apple Business Manager to assign the app to devices.
Why it's wrong here
Apple Business Manager is for VPP apps, not LOB.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
MDM
MDM stands for Mobile Device Management, a technology that allows IT administrators to securely manage, monitor, and enforce policies on mobile devices like smartphones and tablets from a central console.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.