MD-102 Device restrictions Practice Question
You need to ensure that only devices that have a specific set of approved iOS apps can access company resources. Which Intune feature should you use?
⚠ Common exam trap
Many candidates confuse this with device restriction profiles that can block the installation of unapproved apps, but compliance policies only check for the presence of apps.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device compliance policy with required apps
Device compliance policy with required apps allows you to specify a list of iOS apps that must be installed for a device to be compliant. By combining this with conditional access, you can block non-compliant devices from accessing corporate resources, ensuring that only devices with the approved apps gain access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Selective wipe
Why it's wrong here
Selective wipe is used to remove corporate data from a device, not to control app installation.
- ✗
App protection policy
Why it's wrong here
App protection policies control how data is handled within managed apps, but they do not restrict which apps can be installed.
- ✓
Device compliance policy with required apps
Why this is correct
Device compliance policy with required apps can verify mandatory apps are present, but it does not block installation of non-approved apps. It is insufficient for the requirement.
- ✗
App configuration policy
Why it's wrong here
App configuration policies supply settings to apps, not control installation.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.