MD-102 Manage and maintain devices Practice Question
Your organization uses Microsoft Intune to manage iOS/iPadOS devices. You have deployed a device configuration profile that configures the device's email settings for the native Mail app. Recently, the organization decided to switch to Microsoft Outlook for iOS as the primary email client. You need to ensure that users can only use Outlook for accessing corporate email, and that the native Mail app is blocked from accessing corporate data. Which combination of Intune policies should you implement?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Create an App Protection Policy (MAM) that restricts the transfer of corporate data to other apps and a Device Configuration Profile that sets the default mail app to Outlook.
An App Protection Policy (MAM) can restrict corporate data access to only managed apps like Outlook, preventing the native Mail app from opening corporate data. Additionally, a Device Configuration Profile can set Outlook as the default mail app on iOS/iPadOS devices, effectively blocking the native Mail app from handling corporate email. Option B is incorrect because a device compliance policy requiring Outlook installation does not prevent the native Mail app from accessing data. Option C is incorrect because device enrollment restrictions are for initial enrollment, not controlling app usage. Option D is incorrect because a conditional access policy can block the native Mail app from Exchange Online but does not set Outlook as the default mail app.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Create an App Protection Policy (MAM) that restricts the transfer of corporate data to other apps and a Device Configuration Profile that sets the default mail app to Outlook.
Why this is correct
MAM policy can block data transfer to native Mail, and configuration profile sets default app.
- ✗
Create a device compliance policy that requires the device to have Outlook installed.
Why it's wrong here
Compliance policies do not block apps or set defaults.
- ✗
Use device enrollment restrictions to block devices that have the native Mail app installed.
Why it's wrong here
Enrollment restrictions don't control app behavior post-enrollment.
- ✗
Create a conditional access policy for Exchange Online that blocks the native Mail app and allows only Outlook.
Why it's wrong here
Conditional access blocks access, but does not set Outlook as default mail app on the device.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Device configuration
Device configuration is the process of setting up and customizing the operating system, security policies, applications, and network settings on a device so it can securely connect to and function within an organization's IT environment.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.