MD-102 Prepare infrastructure for devices Practice Question
Your organization uses Microsoft Intune to manage devices. You need to ensure that only approved applications can run on Windows 10 devices. Which THREE components can you use to implement application control? (Choose three.)
⚠ Common exam trap
Candidates often confuse Windows Information Protection (WIP) with application control because both involve 'policies' in Intune, but WIP is strictly for data loss prevention, not for blocking or allowing application execution.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Windows Defender Application Control (WDAC).
Windows Defender Application Control (WDAC) is a code integrity feature that restricts which executables, scripts, and installers can run on Windows 10 devices. It uses a trust-based model where only binaries signed by approved publishers or with specific hash values are allowed, making it a core component for application control in an Intune-managed environment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Windows Information Protection (WIP).
Why it's wrong here
WIP protects corporate data from being leaked, but does not control app execution.
- ✓
Windows Defender Application Control (WDAC).
Why this is correct
WDAC is a code integrity policy to control what apps can run.
- ✓
Intune application control policies.
Why this is correct
Intune can deploy WDAC policies to devices.
- ✓
AppLocker.
Why this is correct
AppLocker can restrict which apps users can run.
- ✗
BitLocker drive encryption.
Why it's wrong here
BitLocker encrypts drives, not control applications.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Windows 10
Windows 10 is a personal computer operating system developed by Microsoft that combines the familiarity of Windows 7 with the modern features of Windows 8, designed to run on a wide range of devices from desktops to tablets.
Key term
Application Control
Application Control is a security feature in Windows that allows administrators to specify exactly which applications are allowed to run on a device, blocking everything else by default.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.