Practice Test GeeksMD-101 - Managing Modern Desktops Practice Test
← All MD-101 Flashcard Decks

Mobile Application Management and App Protection Flashcards

6 cards from real MD-101 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Mobile Application Management and App Protection flashcards as text

  1. What must users do on an unenrolled iOS device before App Protection Policies take effect in apps like Outlook?

    Answer: Sign in with their Azure AD corporate account within the Intune-managed app

    On unenrolled devices, App Protection Policies activate when the user signs into the app with their corporate Azure AD account, triggering policy evaluation.

  2. Which Intune App Protection Policy conditional launch setting blocks jailbroken or rooted devices from accessing corporate app data?

    Answer: Jailbroken/rooted devices — Block access or Wipe data

    The 'Jailbroken/rooted devices' conditional launch setting detects compromised devices and can block access or wipe corporate data from the app.

  3. An organization deploys Outlook with an App Protection Policy requiring PIN. A user says they are not prompted for a PIN. What is the most likely cause?

    Answer: The App Protection Policy is not assigned to the user's Azure AD group

    If the user's group is not included in the App Protection Policy assignment, the policy never applies and no PIN prompt appears.

  4. Which Intune report shows the protection status of apps across users, including whether App Protection Policies have been applied?

    Answer: App protection status report under Apps > Monitor

    The App protection status report under Apps > Monitor in Intune shows per-user and per-app protection policy application status.

  5. What is the purpose of the 'Minimum OS version' conditional launch setting in an App Protection Policy?

    Answer: To block or warn users on OS versions below the minimum from accessing corporate app data

    The Minimum OS version conditional launch setting blocks access or warns users when their device OS is below the required version, protecting against known OS vulnerabilities.

  6. Which Intune capability allows managed apps to open documents only in other managed apps, preventing data leakage to personal apps?

    Answer: Managed Open-In / Share extension restriction via App Protection Policy data transfer settings

    App Protection Policy data transfer settings restrict 'Send org data to other apps' to 'Policy managed apps only', enforcing Managed Open-In on iOS and Android.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Retake policy, passing score, fees, time limit, exam information · verified Oct 2026
  2. home.pearsonvue.com — Test delivery · verified Oct 2026