An organization uses Intune app protection policies for unmanaged BYOD devices. They want to ensure that when a user opens a corporate document in the Microsoft Word app on a personal device, the app shows the corporate branding and prevents saving to personal cloud storage. Which capability of app protection policies accomplishes this?

Conditional Access grant controls

A company uses Microsoft Intune to manage corporate devices and also allows BYOD. They want to ensure that only the Outlook app can access Exchange Online, and that the Outlook app is protected by an app protection policy. They also want to block access from devices that are not compliant. What should you configure?

Create a Conditional Access policy that grants access to Exchange Online only when the client app is Outlook and the device is compliant, and also requires an app protection policy.

Create an app configuration policy that restricts Exchange Online access to Outlook only and requires compliance.

Create a device compliance policy that requires Outlook to be installed and the device to be compliant.

Create an app protection policy that blocks all apps except Outlook and requires device compliance.

A company uses Intune app protection policies to protect Microsoft 365 apps on unmanaged devices. They want to require that users accessing corporate data from an unmanaged device have a compliant app protection policy applied. Which Microsoft Entra Conditional Access control should they use?

Require device to be marked as compliant

An administrator wants to use Microsoft Entra Conditional Access to enhance app protection policies by blocking access to Microsoft 365 apps from devices that do not have an app protection policy applied. Which assignment should they configure in the Conditional Access policy?

Target the Microsoft 365 apps that support app protection policies

A company uses Microsoft Intune to manage corporate-owned Windows 10 devices. They have an app protection policy for Microsoft Edge that requires a PIN. They want to configure Edge to use a specific homepage and to block specific websites. What should you do?

Create an app protection policy for Edge that includes the homepage and blocked website settings, and assign it to the user group.

Create a Conditional Access policy that includes the homepage and blocked website settings, and assign it to the user group.

Create a device compliance policy that includes the homepage and blocked website settings, and assign it to the user group.

Create an app configuration policy for managed devices that includes the homepage and blocked website settings, and assign it to the user group.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 4Objective 2

Plan and Implement App Protection and App Configuration Policies MD-102 Practice Questions (Page 3)

Part of the Manage and secure applications domain, which accounts for 15–20% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

5concepts

15–20%of the exam

Questions 11–15

11foundation · easy
An organization uses Intune app protection policies for unmanaged BYOD devices. They want to ensure that when a user opens a corporate document in the Microsoft Word app on a personal device, the app shows the corporate branding and prevents saving to personal cloud storage. Which capability of app protection policies accomplishes this?
Select an answer first
12application · medium
A company uses Microsoft Intune to manage corporate devices and also allows BYOD. They want to ensure that only the Outlook app can access Exchange Online, and that the Outlook app is protected by an app protection policy. They also want to block access from devices that are not compliant. What should you configure?
Select an answer first
13foundation · easy
A company uses Intune app protection policies to protect Microsoft 365 apps on unmanaged devices. They want to require that users accessing corporate data from an unmanaged device have a compliant app protection policy applied. Which Microsoft Entra Conditional Access control should they use?
Select an answer first
14foundation · easy
An administrator wants to use Microsoft Entra Conditional Access to enhance app protection policies by blocking access to Microsoft 365 apps from devices that do not have an app protection policy applied. Which assignment should they configure in the Conditional Access policy?
Select an answer first
15expert · medium
A company uses Microsoft Intune to manage corporate-owned Windows 10 devices. They have an app protection policy for Microsoft Edge that requires a PIN. They want to configure Edge to use a specific homepage and to block specific websites. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Plan and Implement App Protection and App Configuration Policies MD-102 Practice Questions (Page 3)

Questions 11–15

A company uses Intune app protection policies to protect Microsoft 365 apps on unmanaged devices. They want to require that users accessing corporate data from an unmanaged device have a compliant app protection policy applied. Which Microsoft Entra Conditional Access control should they use?

An administrator wants to use Microsoft Entra Conditional Access to enhance app protection policies by blocking access to Microsoft 365 apps from devices that do not have an app protection policy applied. Which assignment should they configure in the Conditional Access policy?

A company uses Microsoft Intune to manage corporate-owned Windows 10 devices. They have an app protection policy for Microsoft Edge that requires a PIN. They want to configure Edge to use a specific homepage and to block specific websites. What should you do?

Keep studying — Manage and secure applications