Contoso allows users to access Microsoft Outlook on both corporate-owned, Intune-managed Windows devices and personal Android devices that are not enrolled. The security team wants to ensure that when users access corporate email from the personal Android devices, the Outlook app requires a PIN and blocks copy/paste of corporate data. For the managed Windows devices, they want to enforce similar controls but also require the device to be compliant before email access. What should you configure?

Enroll the personal Android devices in Intune and then apply a device configuration policy that enforces the PIN and copy/paste restrictions.

Create a single app protection policy for both Android and Windows that requires a PIN and restricts cut/copy/paste, and assign it to all users.

Create a device compliance policy for Android and Windows, and then use Conditional Access to require the Outlook app to be protected by an app protection policy.

Create an app protection policy for Android that requires a PIN and restricts cut/copy/paste, and a Conditional Access policy that requires a compliant device for the Windows devices.

A company uses Microsoft Intune to manage Windows 10 devices. They want to configure Microsoft Edge to use a specific homepage and to block specific websites. The devices are enrolled in Intune. What should you use?

A device compliance policy that includes the homepage and blocked website settings.

An app protection policy for Windows that includes the homepage and blocked website settings.

A Conditional Access policy that includes the homepage and blocked website settings.

An app configuration policy for managed devices that includes the homepage and blocked website settings.

Your organization uses Microsoft Intune to manage iOS devices. You need to configure Microsoft Outlook for iOS to connect to a specific Exchange Online mailbox and use a specific account name. The devices are enrolled in Intune. What should you create?

A Conditional Access policy that includes the mail server and account name settings.

An app configuration policy for managed devices that includes the mail server and account name settings.

An app protection policy for iOS that includes the mail server and account name settings.

A device configuration profile that includes the mail server and account name settings.

Contoso has a fleet of Windows 11 devices enrolled in Microsoft Intune as corporate-owned devices. The security team wants to ensure that when users access Microsoft Outlook on these devices, they are required to use a PIN and that organizational data in the app is encrypted. You need to configure the appropriate policy. What should you do?

Create an app configuration policy for Outlook with PIN and encryption settings, and assign it to the Windows device group.

Create a device compliance policy requiring a PIN and encryption, and assign it to the Windows device group.

Create a Conditional Access policy requiring a compliant device and an app protection policy for Outlook.

Create an app protection policy for Outlook with PIN and encryption settings, and assign it to the Windows device group.

Microsoft 365 Certified:Endpoint Administrator Associate

Domain 4Objective 2

Plan and Implement App Protection and App Configuration Policies MD-102 Practice Questions (Page 4)

Part of the Manage and secure applications domain, which accounts for 15–20% of the MD-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~6–13 in this domain), expect 3–7 from this objective — we provide 19 practice questions to prepare you well beyond it. (estimate)

19questions here

4free pages

5concepts

15–20%of the exam

Questions 16–19

16application · medium
Contoso allows users to access Microsoft Outlook on both corporate-owned, Intune-managed Windows devices and personal Android devices that are not enrolled. The security team wants to ensure that when users access corporate email from the personal Android devices, the Outlook app requires a PIN and blocks copy/paste of corporate data. For the managed Windows devices, they want to enforce similar controls but also require the device to be compliant before email access. What should you configure?
Select an answer first
17application · medium
A company uses Microsoft Intune to manage Windows 10 devices. They want to configure Microsoft Edge to use a specific homepage and to block specific websites. The devices are enrolled in Intune. What should you use?
Select an answer first
18application · medium
Your organization uses Microsoft Intune to manage iOS devices. You need to configure Microsoft Outlook for iOS to connect to a specific Exchange Online mailbox and use a specific account name. The devices are enrolled in Intune. What should you create?
Select an answer first
19application · medium
Contoso has a fleet of Windows 11 devices enrolled in Microsoft Intune as corporate-owned devices. The security team wants to ensure that when users access Microsoft Outlook on these devices, they are required to use a PIN and that organizational data in the app is encrypted. You need to configure the appropriate policy. What should you do?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to MD-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MD-102” is a trademark of its owner, used for identification only.

Plan and Implement App Protection and App Configuration Policies MD-102 Practice Questions (Page 4)

Questions 16–19

A company uses Microsoft Intune to manage Windows 10 devices. They want to configure Microsoft Edge to use a specific homepage and to block specific websites. The devices are enrolled in Intune. What should you use?

Your organization uses Microsoft Intune to manage iOS devices. You need to configure Microsoft Outlook for iOS to connect to a specific Exchange Online mailbox and use a specific account name. The devices are enrolled in Intune. What should you create?

Keep studying — Manage and secure applications