MD-102 Manage applications Practice Question
Your organization uses Microsoft Intune to manage devices. You need to ensure that only compliant devices can access corporate applications. Which TWO configurations should you implement?
⚠ Common exam trap
A common mix-up: candidates confuse App Protection Policies (which protect data on unmanaged devices) with device compliance policies (which require managed devices to meet security baselines), leading them to select Option A instead of the correct combination of B and E.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create a device compliance policy
A device compliance policy defines the security requirements (e.g., encryption, OS version, jailbreak detection) that a device must meet to be considered compliant. Option E is correct because a Conditional Access policy can enforce that only compliant devices are granted access to corporate applications, using the 'Require device to be marked as compliant' grant control. Together, these two configurations ensure that non-compliant devices are blocked from accessing corporate apps.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy an App Protection Policy
Why it's wrong here
For app-level protection, not device compliance.
- ✓
Create a device compliance policy
Why this is correct
Defines compliance requirements.
- ✗
Configure a device configuration profile
Why it's wrong here
Does not enforce access control.
- ✗
Enable multifactor authentication (MFA) for all users
Why it's wrong here
MFA is identity-based, not device compliance.
- ✓
Create a Conditional Access policy requiring compliant devices
Why this is correct
Blocks non-compliant devices.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Encryption
Encryption is the process of converting readable data into a secret code to prevent unauthorized access.
About these practice questions
This MD-102 question is part of Courseiva's 942-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.