MD-102 Prepare infrastructure for devices Practice Question
Your organization uses Microsoft Intune to manage iOS devices. You need to deploy an app that requires a VPN configuration when the app is launched. Which TWO options can you use to achieve this? (Choose two.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a managed app configuration to include VPN settings.
Options A and E are correct. A per-app VPN configuration profile (E) can be assigned to the app to trigger VPN on launch. Alternatively, a managed app configuration (A) can include VPN settings to enable per-app VPN. Option B is incorrect because a device compliance policy cannot configure VPN settings. Option C is incorrect because app protection policies do not manage VPN connectivity. Option D is incorrect because a device-wide VPN profile applies to all traffic and does not restrict to specific apps.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Use a managed app configuration to include VPN settings.
Why this is correct
Managed app configuration can include VPN settings to apply when the app launches.
- ✗
Use a device compliance policy to require VPN.
Why it's wrong here
A device compliance policy can mandate VPN as a compliance requirement but does not configure VPN for the app.
- ✗
Assign an app protection policy that enables VPN.
Why it's wrong here
App protection policies focus on data protection, not VPN connectivity.
- ✗
Create a device-wide VPN configuration profile.
Why it's wrong here
A device-wide VPN profile applies to all traffic, not just the specific app, so it does not meet the requirement.
- ✓
Create a per-app VPN configuration profile and assign it to the app.
Why this is correct
A per-app VPN profile ensures VPN is established when the app is launched.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
General Data Protection Regulation
A European Union law that gives individuals control over their personal data and sets strict rules for how organizations collect, store, and process that data.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.