A company uses Microsoft Word and Excel on employee-owned Android devices that are not enrolled in Intune. The IT team wants to configure these apps to open documents only from the corporate SharePoint site and to disable the 'Save As' feature to local storage. What should you do?

Create a device configuration profile for Android that configures the Word and Excel apps.

Create an app protection policy that includes the SharePoint location and 'Save As' settings, and assign it to the user group.

Use Conditional Access to restrict Word and Excel to open only from SharePoint and disable 'Save As'.

Create an app configuration policy for managed apps that includes the SharePoint location and 'Save As' settings, and assign it to the user group.

An organization manages Windows 11 devices with Intune. They want to configure the Microsoft Teams app on these devices with a specific tenant ID and logging settings. Which type of policy should they use?

App configuration policy for managed devices

A company uses Microsoft Intune to manage Windows 10 devices. They have an app protection policy for Microsoft Edge that requires a PIN. They want to ensure that users can only access Edge if the device is compliant and the app protection policy is applied. What should you configure?

Create an app configuration policy that sets the PIN requirement and assign it to the user group.

Create a Conditional Access policy that requires a compliant device and an approved client app, and assign it to the user group.

Create an app protection policy that requires a PIN and assign it to the user group.

Create a device compliance policy that requires a PIN and assign it to the user group.

A law firm allows attorneys to use their personal iPads to access client emails via the Outlook app. The firm requires that corporate email data be encrypted at rest, and that the Outlook app cannot back up to iCloud. They also want to block access from jailbroken devices. What should you configure?

Create an app protection policy for iOS that enables encryption, disables iTunes/iCloud backups, and blocks jailbroken/rooted devices. Assign it to the attorney user group.

Create a device compliance policy for iOS that requires encryption and blocks jailbroken devices, and assign it to the iPads.

Create a Conditional Access policy that requires the Outlook app to use an app protection policy, and also block iCloud backup via an app configuration policy.

Enroll the personal iPads in Intune and then apply a device configuration policy that enables encryption and blocks jailbroken devices.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 4Objective 2

Plan and Implement App Protection and App Configuration Policies MD-102 Practice Questions (Page 2)

Part of the Manage and secure applications domain, which accounts for 15–20% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

5concepts

15–20%of the exam

Questions 6–10

6application · medium
A company uses Microsoft Word and Excel on employee-owned Android devices that are not enrolled in Intune. The IT team wants to configure these apps to open documents only from the corporate SharePoint site and to disable the 'Save As' feature to local storage. What should you do?
Select an answer first
7foundation · easy
An organization manages Windows 11 devices with Intune. They want to configure the Microsoft Teams app on these devices with a specific tenant ID and logging settings. Which type of policy should they use?
Select an answer first
8application · medium
A company uses Microsoft Intune to manage Windows 10 devices. They have an app protection policy for Microsoft Edge that requires a PIN. They want to ensure that users can only access Edge if the device is compliant and the app protection policy is applied. What should you configure?
Select an answer first
9foundation · easy
An administrator wants to use an app configuration policy for managed devices to set the default landing page for the Microsoft Edge browser on all enrolled Windows 10 devices. Which platform should they select when creating the policy?
Select an answer first
10application · medium
A law firm allows attorneys to use their personal iPads to access client emails via the Outlook app. The firm requires that corporate email data be encrypted at rest, and that the Outlook app cannot back up to iCloud. They also want to block access from jailbroken devices. What should you configure?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Plan and Implement App Protection and App Configuration Policies MD-102 Practice Questions (Page 2)

Questions 6–10

A company uses Microsoft Word and Excel on employee-owned Android devices that are not enrolled in Intune. The IT team wants to configure these apps to open documents only from the corporate SharePoint site and to disable the 'Save As' feature to local storage. What should you do?

An organization manages Windows 11 devices with Intune. They want to configure the Microsoft Teams app on these devices with a specific tenant ID and logging settings. Which type of policy should they use?

A company uses Microsoft Intune to manage Windows 10 devices. They have an app protection policy for Microsoft Edge that requires a PIN. They want to ensure that users can only access Edge if the device is compliant and the app protection policy is applied. What should you configure?

An administrator wants to use an app configuration policy for managed devices to set the default landing page for the Microsoft Edge browser on all enrolled Windows 10 devices. Which platform should they select when creating the policy?

Keep studying — Manage and secure applications