MD-102 Protect devices Practice Question
Your organization uses Windows Defender Application Control (WDAC) to allow only approved apps. After deploying a WDAC policy via Intune, some users report that a critical line-of-business app is blocked. How should you troubleshoot?
⚠ Common exam trap
It's easy for candidates to confuse WDAC with AppLocker and assume AppLocker logs are relevant, but WDAC uses its own dedicated CodeIntegrity logs for all block events.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Review CodeIntegrity/Operational logs in Event Viewer
WDAC blocks or allows applications based on code integrity rules, and when a policy is enforced, blocked execution events are logged in the CodeIntegrity/Operational event log under Event Viewer. Reviewing this log provides specific block events with file details and rule identifiers, enabling you to identify why the LOB app was blocked and adjust the policy accordingly.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Review CodeIntegrity/Operational logs in Event Viewer
Why this is correct
WDAC blocks are logged in CodeIntegrity/Operational.
- ✗
Check AppLocker logs in Event Viewer
Why it's wrong here
AppLocker is separate from WDAC; WDAC uses CodeIntegrity logs.
- ✗
Review Intune device management events for policy errors
Why it's wrong here
Intune logs show policy application status, not app block details.
- ✗
Check Microsoft 365 Defender portal for WDAC alerts
Why it's wrong here
Defender portal may show summary alerts but not detailed per-app block logs.
Go deeper
Related to this question
Learn chapter
Enrolling Devices with Microsoft Intune
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Line-of-business app
A line-of-business app is a software application that is essential for running a specific core business process, such as accounting, inventory management, or customer relationship management.
About these practice questions
Courseiva writes every MD-102 question from scratch — 942 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.