MD-102 Prepare infrastructure for devices Practice Question
Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You need to ensure that users cannot remove the Mail app that is required for corporate email. What configuration should you apply?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure a Managed App Configuration with the key 'preventManagedAppRemoval' set to true.
A Managed App Configuration with the 'preventManagedAppRemoval' key set to true prevents users from removing the Mail app from their device. Option A is incorrect because deploying the Mail app as a required volume-purchased app via Apple Business Manager only ensures the app is installed but does not prevent users from deleting it. Option C is incorrect because hiding the Mail app from the home screen does not prevent uninstall; it only removes the icon. Option D is incorrect because an app protection policy that blocks removal of corporate data applies to data within the app, not to the app itself.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy the Mail app as a required volume-purchased app using Apple Business Manager.
Why it's wrong here
Deploying the Mail app as a required volume-purchased app using Apple Business Manager does not prevent users from removing the app; it only ensures the app is installed and can be reinstalled if removed.
- ✓
Configure a Managed App Configuration with the key 'preventManagedAppRemoval' set to true.
Why this is correct
A Managed App Configuration with the 'preventManagedAppRemoval' key set to true prevents users from removing the managed Mail app on iOS/iPadOS devices.
- ✗
Set a device restriction policy to hide the Mail app from the home screen.
Why it's wrong here
A device restriction policy can hide the Mail app from the home screen, but it does not prevent uninstallation; users can still remove the app through other means.
- ✗
Assign an app protection policy that blocks the removal of corporate data.
Why it's wrong here
An app protection policy that blocks removal of corporate data protects data, not the app itself; it does not prevent the user from deleting the Mail app.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
App protection policy
An app protection policy is a set of rules that controls how data is handled and secured within mobile applications, ensuring corporate information stays safe even on personal devices.
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.