SC-100 Practice Question: Design security solutions for applications and data
Your organization uses Microsoft Intune to manage devices. You need to deploy a line-of-business (LOB) app to iOS devices that is not available in the public App Store. The app is signed with an enterprise certificate. Which app deployment method should you use?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
iOS line-of-business app deployment in Intune
iOS line-of-business app deployment in Intune. Intune supports deploying custom in-house iOS apps via the iOS LOB app type, which uploads the signed .ipa file and installs it on enrolled devices without requiring the public App Store, matching the scenario of an enterprise-certificate-signed LOB app. Option A (Android Enterprise managed Google Play) is for Android apps distributed through managed Google Play, not iOS. Option B (VPP token) is used for purchasing and distributing App Store apps in volume, not for custom in-house iOS apps. Option C (Microsoft Store for Business) distributes Windows apps and is unrelated to iOS deployment.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Android Enterprise managed Google Play
Why it's wrong here
Android Enterprise managed Google Play is the deployment mechanism for Android devices, not iOS. It uses Play-managed accounts and work-profile containers to push apps from Google Play or private apps, but it has no integration with Apple's iOS signing or enrollment. Therefore it cannot deliver an enterprise-signed IPA to iPhones or iPads.
- ✗
Volume Purchase Program (VPP) token
Why it's wrong here
A Volume Purchase Program (VPP) token, now handled through Apple Business Manager, only authorizes the bulk purchase and assignment of public App Store apps. It does not support uploading or sideloading enterprise-signed line-of-business binaries. Even with a valid VPP token, Intune cannot use it to deploy a custom in-house iOS app outside the App Store.
- ✗
Microsoft Store for Business
Why it's wrong here
Microsoft Store for Business is a Windows-centric storefront that historically allowed IT admins to distribute UWP/Win32 apps to managed Windows clients. It was deprecated and no longer exists for app distribution in current Intune scenarios. Because it never supported iOS, it cannot be used to deploy enterprise-signed apps to Apple devices.
- ✓
iOS line-of-business app deployment in Intune
Why this is correct
iOS line-of-business (LOB) deployment in Intune is explicitly designed for enterprise-signed apps: you upload an .ipa (or .app) package, sign it with an Apple Enterprise Developer certificate, and assign it to users or devices. Intune creates a configuration profile to trust the enterprise certificate, allowing the app to install directly rather than through the App Store. This is the only option here that supports the scenario's iOS LOB requirement.
Go deeper
Related to this question
About these practice questions
One of 605 original SC-100 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-100 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-100 exam.