MD-102 Manage applications Practice Question
You use Microsoft Intune to manage Windows 11 devices. A critical Win32 app must install before any user signs in, and the installer cannot run in the user's context because it writes to protected registry keys and requires elevation. The app has no dependencies and does not need to be visible in the Company Portal. How should you configure the app?
⚠ Common exam trap
The trap here is pairing the correct System install context with an Available assignment, which reintroduces the user interaction the scenario forbids.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Set Install behavior to System, and assign the app as Required to a device group.
Because the installer needs privileged writes and must run without user interaction, configure Install behavior as System and assign the app as Required to a device group. System context lets the Intune Management Extension run the installer as LocalSystem, which handles protected registry writes silently, and Required device targeting guarantees delivery regardless of who signs in.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Set Install behavior to User, and assign the app as Available to a device group.
Why it's wrong here
User context cannot write to the protected registry locations described, and Available intent requires the end user to trigger the install from the Company Portal. Device-group targeting with Available intent is also an unusual pattern that still depends on user action, so this combination fails both the elevation and the silent-delivery requirements.
- ✓
Set Install behavior to System, and assign the app as Required to a device group.
Why this is correct
System install context runs the installer as LocalSystem via the Intune Management Extension, which can write to protected registry keys and perform privileged operations without user interaction. Assigning as Required to a device group ensures the app is delivered to devices regardless of sign-in, satisfying the pre-sign-in requirement without publishing it in the Company Portal.
- ✗
Set Install behavior to System, and assign the app as Available to a user group.
Why it's wrong here
Available assignments require the user to initiate installation from the Company Portal, which conflicts with the requirement that no user interaction is needed and that the app not be visible. Although the System context is correct, the assignment intent and target are wrong for a silent, pre-sign-in deployment.
- ✗
Set Install behavior to User, and assign the app as Required to a device group.
Why it's wrong here
User install context runs the installer with the signed-in user's token, which lacks the rights to write to protected registry keys. Even with a Required device-group assignment, the installer still executes in the user context and elevation prompts cannot be satisfied silently. The scenario explicitly requires system-level writes, so the user context cannot succeed here.
Go deeper
Related to this question
Learn chapter
Troubleshooting Device Enrollment and Management
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Windows 11
Windows 11 is Microsoft's latest desktop operating system, offering a redesigned interface, enhanced security features, and improved support for modern hardware.
About these practice questions
One of 556 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.