4 - Examine application management Flashcards

1
Q

What is the primary purpose of Microsoft Intune’s App Protection Policies?

A) To configure device compliance settings
B) To manage mobile application security without managing the device
C) To deploy apps to Windows 10 devices
D) To enforce device configuration policies

Source

A

B) To manage mobile application security without managing the device (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which type of app should you add in Intune to deploy a custom business application packaged as an MSI?

A) Store app
B) Line-of-business app
C) Web link
D) Built-in app

Source

A

B) Line-of-business app (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is a benefit of using Microsoft Store for Business with Intune?

A) It provides automatic updates for all apps
B) It enables offline licensing of apps
C) It allows for deploying non-Windows apps
D) It manages Windows updates

Source

A

B) It enables offline licensing of apps (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which feature in Intune can be used to prevent specific apps from accessing corporate data?

A) Compliance policy
B) Conditional Access policy
C) App protection policy
D) Device configuration profile

Source

A

C) App protection policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

How can you ensure that a Windows 10 device only runs approved applications?

A) Configure a compliance policy
B) Use Windows Defender Application Control (WDAC)
C) Set up a device configuration profile
D) Implement Conditional Access

Source

A

B) Use Windows Defender Application Control (WDAC) (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What type of app should be deployed using an app configuration policy in Intune?

A) Web apps
B) Store apps
C) Managed apps
D) Line-of-business apps

Source

A

C) Managed apps (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which method should you use to deploy a legacy Win32 application via Intune?

A) Upload the app package directly to Intune
B) Use the Microsoft Store for Business
C) Wrap the application using the Intune Win32 App Packaging Tool
D) Deploy via PowerShell script

Source

A

C) Wrap the application using the Intune Win32 App Packaging Tool (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can you enforce that a mobile app configuration is applied on all iOS devices?

A) Use a compliance policy
B) Configure an app configuration policy
C) Create an app protection policy
D) Set up a device configuration profile

Source

A

B) Configure an app configuration policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

You need to deploy an iOS app from a third-party source that isn’t in the App Store. What type of app should you add in Intune?

A) Web link
B) Built-in app
C) Store app
D) Line-of-business app

Source

A

D) Line-of-business app (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the primary use case for the Managed Google Play in Intune?

A) Deploying iOS applications
B) Managing Windows 10 apps
C) Deploying Android apps to fully managed devices
D) Enforcing app protection policies

Source

A

C) Deploying Android apps to fully managed devices (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which type of app should be used to distribute a URL shortcut to a web-based internal application on Windows 10 devices?

A) Web link
B) Store app
C) Line-of-business app
D) Built-in app

Source

A

A) Web link (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What is a key difference between deploying apps via Intune as a required app versus available app?

A) Required apps are automatically installed; available apps must be manually installed by the user
B) Available apps are automatically installed; required apps must be manually installed by the user
C) Required apps can be deployed only to groups; available apps can be deployed to all users
D) Available apps are only for Windows devices; required apps are for all platforms

Source

A

A) Required apps are automatically installed; available apps must be manually installed by the user (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

You need to configure a mobile app to require multi-factor authentication (MFA) before accessing company data. What should you implement?

A) Compliance policy
B) App protection policy
C) Conditional Access policy
D) Device configuration profile

Source

A

C) Conditional Access policy (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How can you deploy a pre-configured set of bookmarks to Microsoft Edge for all users in your organization?

A) Configure an app configuration policy
B) Deploy a line-of-business app
C) Use a device configuration profile
D) Set up a compliance policy

Source

A

A) Configure an app configuration policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You need to ensure that corporate data within mobile apps is encrypted. Which Intune feature should you use?

A) Device compliance policies
B) App protection policies
C) Conditional Access policies
D) Device configuration profiles

Source

A

B) App protection policies (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What method should be used to deploy a web app across all managed devices in Intune?

A) Use a web link
B) Use a built-in app
C) Deploy as a line-of-business app
D) Package and deploy using Intune

Source

A

A) Use a web link (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which Intune feature allows you to deploy VPN settings required for an app on Android devices?

A) App configuration policy
B) Device compliance policy
C) Conditional Access policy
D) App protection policy

Source

A

A) App configuration policy (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How can you automatically deploy an app to a device when it enrolls in Intune?

A) Configure as a required app
B) Use a web link
C) Deploy via PowerShell script
D) Set up as an available app

Source

A

A) Configure as a required app (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

You need to create a policy to ensure that only signed applications are allowed to run on Windows 10 devices. What should you use?

A) App protection policy
B) Windows Defender Application Control (WDAC)
C) Device compliance policy
D) Conditional Access policy

Source

A

B) Windows Defender Application Control (WDAC) (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is a scenario where you’d use an app configuration policy in Intune?

A) To enforce device compliance
B) To control app behavior and settings for managed apps
C) To install required apps on devices
D) To block certain apps from being installed

Source

A

B) To control app behavior and settings for managed apps (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the best method to deploy an internal Windows application that does not have an MSI or EXE installer?

A) Use a web link
B) Package it using the Intune Win32 App Packaging Tool
C) Deploy via Microsoft Store for Business
D) Upload it directly to Intune

Source

A

B) Package it using the Intune Win32 App Packaging Tool (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What Intune feature should you configure to ensure that an app’s data is wiped when the app is removed from a device?

A) App protection policy
B) Conditional Access policy
C) Compliance policy
D) Device configuration profile

Source

A

A) App protection policy (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

You need to deploy an app to all Android devices in your organization and ensure it updates automatically. What should you use?

A) Managed Google Play
B) Microsoft Store for Business
C) Line-of-business app
D) Web link

Source

A

A) Managed Google Play (6)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What is the purpose of using app configuration policies in Microsoft Intune?

A) To manage and enforce app compliance across all devices
B) To configure app settings remotely on managed devices
C) To deploy apps to devices automatically
D) To block unauthorized apps from running on devices

Source

A

B) To configure app settings remotely on managed devices (7)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which method should be used to enforce encryption of app data at rest on mobile devices?

A) App configuration policy
B) Device compliance policy
C) App protection policy
D) Conditional Access policy

Source

A

C) App protection policy (7)

26
Q

What should you configure to ensure that an app is removed from a device when the user is no longer a member of a specific group?

A) App protection policy
B) Conditional Access policy
C) App assignment with uninstall
D) Device compliance policy

Source

A

C) App assignment with uninstall (6)

27
Q

How can you restrict access to corporate apps based on the compliance status of the device?

A) App protection policy
B) Device compliance policy
C) Conditional Access policy
D) App configuration policy

Source

A

C) Conditional Access policy (7)

28
Q

You need to deploy an app to macOS devices and ensure it is installed automatically. What should you do?

A) Use a device compliance policy
B) Add the app as a required line-of-business app
C) Deploy via the Apple Business Manager
D) Use a Conditional Access policy

Source

A

B) Add the app as a required line-of-business app (7)

29
Q

What is a key advantage of using Managed Google Play for deploying Android apps through Intune?

A) It supports automatic updates
B) It allows deployment of Windows apps
C) It is the only method to deploy paid apps
D) It integrates with Apple Business Manager

Source

A

A) It supports automatic updates (6)

30
Q

You need to configure a Windows 10 device to block the execution of scripts unless they are signed. Which Intune feature should you use?

A) App protection policy
B) Device compliance policy
C) Windows Defender Application Control
D) Conditional Access policy

Source

A

C) Windows Defender Application Control (7)

31
Q

How can you ensure that an app is only accessible from devices that meet certain security requirements?

A) App protection policy
B) Conditional Access policy
C) Compliance policy
D) Device configuration profile

Source

A

B) Conditional Access policy (7)

32
Q

What is the role of the Intune App SDK in app protection?

A) It adds security features to apps developed in-house
B) It packages apps for deployment through Intune
C) It configures device compliance policies
D) It integrates third-party apps with Intune

Source

A

A) It adds security features to apps developed in-house (6)

33
Q

Which type of app can you deploy using a device configuration profile in Intune?

A) Managed app
B) Line-of-business app
C) Store app
D) Web link

Source

A

B) Line-of-business app (7)

34
Q

You need to configure a policy that wipes corporate data from apps when a device is reported lost. What should you configure?

A) App protection policy
B) Device compliance policy
C) Conditional Access policy
D) Device configuration profile

Source

A

A) App protection policy (7)

35
Q

How can you ensure that an app is available to users but not automatically installed?

A) Configure as an available app
B) Deploy as a web link
C) Use a line-of-business app
D) Set up a device compliance policy

Source

A

A) Configure as an available app (6)

36
Q

Which Intune feature should be used to monitor app installation status on devices?

A) Device compliance reports
B) App installation reports
C) Deployment status reports
D) Software update reports

Source

A

C) Deployment status reports (5)

37
Q

How can you prevent unmanaged devices from accessing corporate apps?

A) Use a compliance policy
B) Implement Conditional Access
C) Configure an app protection policy
D) Set up a device configuration profile

Source

A

B) Implement Conditional Access (6)

38
Q

What is the purpose of using the Intune Win32 App Packaging Tool?

A) To deploy store apps to Windows 10 devices
B) To package and deploy classic Windows apps
C) To manage app protection policies
D) To create web links for deployment

Source

A

B) To package and deploy classic Windows apps (6)

39
Q

How can you restrict access to an app based on the user’s location?

A) Conditional Access policy
B) App protection policy
C) Compliance policy
D) Device configuration profile

Source

A

A) Conditional Access policy (7)

40
Q

You need to create a custom app for internal use on Android devices. What deployment method should you choose in Intune?

A) Web link
B) Managed Google Play private app
C) Store app
D) Line-of-business app

Source

A

B) Managed Google Play private app (7)

41
Q

What should you configure in Intune to ensure that app settings are applied before the user accesses the app?

A) Device compliance policy
B) App configuration policy
C) Conditional Access policy
D) Device configuration profile

Source

A

B) App configuration policy (7)

42
Q

How can you deploy an internal iOS app that is not available in the Apple App Store?

A) Use a web link
B) Deploy as a line-of-business app
C) Configure as a managed app
D) Set up via Apple Business Manager

Source

A

B) Deploy as a line-of-business app (6)

43
Q

What method should be used to deploy a Windows app to devices in a specific department only?

A) Group targeting
B) Device compliance policy
C) Conditional Access policy
D) App configuration policy

Source

A

A) Group targeting (7)

44
Q

What should you use to ensure that only managed devices can install specific apps?

A) App protection policy
B) Device compliance policy
C) Conditional Access policy
D) Device configuration profile

Source

A

C) Conditional Access policy (7)

45
Q

How can you enforce the use of a specific version of an app on all managed devices?

A) App configuration policy
B) Conditional Access policy
C) Device compliance policy
D) Required app assignment

Source

A

D) Required app assignment (7)

46
Q

Which method should be used to block app installation on devices that don’t meet certain security criteria?

A) App protection policy
B) Conditional Access policy
C) Compliance policy
D) Device configuration profile

Source

A

C) Compliance policy (6)

47
Q

How can you automatically update apps deployed via Intune?

A) Use a device compliance policy
B) Configure app auto-update in the deployment settings
C) Set up a Conditional Access policy
D) Use an app protection policy

Source

A

B) Configure app auto-update in the deployment settings (7)

48
Q

Which tool should be used to monitor the deployment of Windows applications in Intune?

A) Software update reports
B) App protection policy
C) Deployment status reports
D) Compliance policy

Source

A

C) Deployment status reports (5)

49
Q

How can you ensure that a specific app is removed from devices when the user’s employment ends?

A) Configure app removal as part of offboarding
B) Set up app assignment with uninstall
C) Use Conditional Access to block access
D) Remove app permissions via Azure AD

Source

A

B) Set up app assignment with uninstall (7)

50
Q

You need to ensure that an app is automatically removed from a user’s device if they no longer belong to a specific group. What should you configure?

A) Conditional Access policy
B) App protection policy
C) App assignment with uninstall
D) Device compliance policy

Source

A

C) App assignment with uninstall (7)

51
Q

Which feature in Intune should you use to deploy a custom iOS app to users without going through the Apple App Store?

A) Web link
B) Line-of-business app
C) Managed Google Play
D) Built-in app

Source

A

B) Line-of-business app (6)

52
Q

What Intune feature allows you to control which users or devices can install specific apps?

A) Device compliance policy
B) App protection policy
C) App configuration policy
D) Conditional Access policy

Source

A

D) Conditional Access policy (7)

53
Q

How can you deploy a VPN configuration required by an app on Android devices using Intune?

A) Device compliance policy
B) App configuration policy
C) Conditional Access policy
D) App protection policy

Source

A

B) App configuration policy (7)

54
Q

What should you configure to ensure that only managed apps can access company data on mobile devices?

A) App configuration policy
B) Conditional Access policy
C) App protection policy
D) Device compliance policy

Source

A

C) App protection policy (7)

55
Q

Which method should you use to distribute a custom Android app to users within your organization?

A) Managed Google Play private app
B) App configuration policy
C) Line-of-business app
D) Web link

Source

A

A) Managed Google Play private app (7)

56
Q

You need to monitor the compliance status of applications deployed to Windows 10 devices. Which tool should you use?

A) Compliance policy reports
B) Deployment status reports
C) App configuration policy
D) Windows Analytics

Source

A

B) Deployment status reports (5)

57
Q

What should you configure to prevent a specific app from accessing corporate data on non-compliant devices?

A) App configuration policy
B) Device compliance policy
C) Conditional Access policy
D) App protection policy

Source

A

C) Conditional Access policy (7)

58
Q

How can you enforce that only signed scripts are allowed to run on Windows 10 devices?

A) Windows Defender Application Control (WDAC)
B) App protection policy
C) Device compliance policy
D) Conditional Access policy

Source

A

A) Windows Defender Application Control (WDAC) (7)

59
Q

You need to deploy a configuration profile that ensures VPN settings are configured on all iOS devices in your organization. What should you configure?

A) App configuration policy
B) Device compliance policy
C) Conditional Access policy
D) Device configuration profile

Source

A

D) Device configuration profile (6)

60
Q

What method should you use to automatically uninstall an app from a user’s device when it is no longer needed?

A) Device compliance policy
B) Conditional Access policy
C) App assignment with uninstall
D) App configuration policy

Source

A

C) App assignment with uninstall (6)