MD-102 Manage applications Practice Question
Your organization uses Microsoft Intune to manage macOS devices. You need to deploy a .pkg app that is signed by a developer certificate that is not yet trusted on the devices. What must you do to allow the installation?
⚠ Common exam trap
Candidates often assume the 'Allow user to bypass' option (Option A) will let the installation proceed despite the untrusted certificate, but it only controls the user-facing error message and does not override macOS security enforcement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Use a device configuration policy to trust the developer certificate before deploying the app.
MacOS requires that the developer certificate of a .pkg app be trusted at the system level before installation can proceed. By deploying a device configuration policy in Intune that adds the developer certificate to the trusted root store, you establish the necessary trust chain, allowing the .pkg to install without user intervention. This approach aligns with macOS Gatekeeper and security policies, which block unsigned or untrusted packages by default.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Deploy the app as a line-of-business app with the 'Allow user to bypass' option enabled.
Why it's wrong here
This option is for iOS/iPadOS, not macOS.
- ✓
Use a device configuration policy to trust the developer certificate before deploying the app.
Why this is correct
Trusting the certificate allows the .pkg to run.
- ✗
Instruct users to manually approve the installation in System Preferences.
Why it's wrong here
Not manageable, and users may not have access.
- ✗
Convert the .pkg to a .dmg and deploy via Microsoft Store for Business.
Why it's wrong here
Not applicable for macOS.
Go deeper
Related to this question
Learn chapter
Introduction to Endpoint Management in Microsoft 365
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Microsoft Intune
Microsoft Intune is a cloud-based service that helps organizations manage employee devices, apps, and security policies without needing to own or control the physical hardware.
About these practice questions
One of 942 original MD-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.