4 - Examine application management Flashcards
What is the primary purpose of Microsoft Intune’s App Protection Policies?
A) To configure device compliance settings B) To manage mobile application security without managing the device C) To deploy apps to Windows 10 devices D) To enforce device configuration policies
B) To manage mobile application security without managing the device (6)
Which type of app should you add in Intune to deploy a custom business application packaged as an MSI?
A) Store app B) Line-of-business app C) Web link D) Built-in app
B) Line-of-business app (6)
What is a benefit of using Microsoft Store for Business with Intune?
A) It provides automatic updates for all apps B) It enables offline licensing of apps C) It allows for deploying non-Windows apps D) It manages Windows updates
B) It enables offline licensing of apps (7)
Which feature in Intune can be used to prevent specific apps from accessing corporate data?
A) Compliance policy B) Conditional Access policy C) App protection policy D) Device configuration profile
C) App protection policy (6)
How can you ensure that a Windows 10 device only runs approved applications?
A) Configure a compliance policy B) Use Windows Defender Application Control (WDAC) C) Set up a device configuration profile D) Implement Conditional Access
B) Use Windows Defender Application Control (WDAC) (7)
What type of app should be deployed using an app configuration policy in Intune?
A) Web apps B) Store apps C) Managed apps D) Line-of-business apps
C) Managed apps (6)
Which method should you use to deploy a legacy Win32 application via Intune?
A) Upload the app package directly to Intune B) Use the Microsoft Store for Business C) Wrap the application using the Intune Win32 App Packaging Tool D) Deploy via PowerShell script
C) Wrap the application using the Intune Win32 App Packaging Tool (7)
How can you enforce that a mobile app configuration is applied on all iOS devices?
A) Use a compliance policy B) Configure an app configuration policy C) Create an app protection policy D) Set up a device configuration profile
B) Configure an app configuration policy (6)
You need to deploy an iOS app from a third-party source that isn’t in the App Store. What type of app should you add in Intune?
A) Web link B) Built-in app C) Store app D) Line-of-business app
D) Line-of-business app (6)
What is the primary use case for the Managed Google Play in Intune?
A) Deploying iOS applications B) Managing Windows 10 apps C) Deploying Android apps to fully managed devices D) Enforcing app protection policies
C) Deploying Android apps to fully managed devices (6)
Which type of app should be used to distribute a URL shortcut to a web-based internal application on Windows 10 devices?
A) Web link B) Store app C) Line-of-business app D) Built-in app
A) Web link (6)
What is a key difference between deploying apps via Intune as a required app versus available app?
A) Required apps are automatically installed; available apps must be manually installed by the user B) Available apps are automatically installed; required apps must be manually installed by the user C) Required apps can be deployed only to groups; available apps can be deployed to all users D) Available apps are only for Windows devices; required apps are for all platforms
A) Required apps are automatically installed; available apps must be manually installed by the user (6)
You need to configure a mobile app to require multi-factor authentication (MFA) before accessing company data. What should you implement?
A) Compliance policy B) App protection policy C) Conditional Access policy D) Device configuration profile
C) Conditional Access policy (7)
How can you deploy a pre-configured set of bookmarks to Microsoft Edge for all users in your organization?
A) Configure an app configuration policy B) Deploy a line-of-business app C) Use a device configuration profile D) Set up a compliance policy
A) Configure an app configuration policy (6)
You need to ensure that corporate data within mobile apps is encrypted. Which Intune feature should you use?
A) Device compliance policies B) App protection policies C) Conditional Access policies D) Device configuration profiles
B) App protection policies (6)
What method should be used to deploy a web app across all managed devices in Intune?
A) Use a web link B) Use a built-in app C) Deploy as a line-of-business app D) Package and deploy using Intune
A) Use a web link (6)
Which Intune feature allows you to deploy VPN settings required for an app on Android devices?
A) App configuration policy B) Device compliance policy C) Conditional Access policy D) App protection policy
A) App configuration policy (6)
How can you automatically deploy an app to a device when it enrolls in Intune?
A) Configure as a required app B) Use a web link C) Deploy via PowerShell script D) Set up as an available app
A) Configure as a required app (7)
You need to create a policy to ensure that only signed applications are allowed to run on Windows 10 devices. What should you use?
A) App protection policy B) Windows Defender Application Control (WDAC) C) Device compliance policy D) Conditional Access policy
B) Windows Defender Application Control (WDAC) (7)
What is a scenario where you’d use an app configuration policy in Intune?
A) To enforce device compliance B) To control app behavior and settings for managed apps C) To install required apps on devices D) To block certain apps from being installed
B) To control app behavior and settings for managed apps (6)
What is the best method to deploy an internal Windows application that does not have an MSI or EXE installer?
A) Use a web link B) Package it using the Intune Win32 App Packaging Tool C) Deploy via Microsoft Store for Business D) Upload it directly to Intune
B) Package it using the Intune Win32 App Packaging Tool (7)
What Intune feature should you configure to ensure that an app’s data is wiped when the app is removed from a device?
A) App protection policy B) Conditional Access policy C) Compliance policy D) Device configuration profile
A) App protection policy (7)
You need to deploy an app to all Android devices in your organization and ensure it updates automatically. What should you use?
A) Managed Google Play B) Microsoft Store for Business C) Line-of-business app D) Web link
A) Managed Google Play (6)
What is the purpose of using app configuration policies in Microsoft Intune?
A) To manage and enforce app compliance across all devices B) To configure app settings remotely on managed devices C) To deploy apps to devices automatically D) To block unauthorized apps from running on devices
B) To configure app settings remotely on managed devices (7)