MD-102 Manage and maintain devices Practice Question
Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You need to ensure that only approved apps can be installed on corporate-owned devices. Which configuration profile type should you use?
⚠ Common exam trap
Watch out — candidates often confuse 'Device restrictions profile' with 'Device features profile' or think that enrollment profiles can enforce app restrictions, when in fact only the restrictions profile contains the granular app installation controls.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Device restrictions profile with 'Allow app installation from App Store only' set to 'Block'.
The 'Device restrictions profile' in Microsoft Intune includes the 'Allow app installation from App Store only' setting. Setting this to 'Block' prevents users from installing apps from the App Store, effectively restricting installations to only those apps that are deployed through Intune as managed apps or volume-purchased apps. This ensures that only approved apps can be installed on corporate-owned iOS/iPadOS devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Email profile.
Why it's wrong here
Email profile configures email accounts.
- ✗
Device features profile.
Why it's wrong here
Device features profile manages device-specific settings like wallpaper.
- ✗
Apple Configurator enrollment profile.
Why it's wrong here
Enrollment profile does not restrict app installation.
- ✓
Device restrictions profile with 'Allow app installation from App Store only' set to 'Block'.
Why this is correct
This blocks installation of apps not from the App Store.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.