Practice Test GeeksMD-101 - Managing Modern Desktops Practice Test
← All MD-101 Flashcard Decks

Mobile Application Management and App Protection Flashcards

6 cards from real MD-101 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Mobile Application Management and App Protection flashcards as text

  1. What is the primary difference between Mobile Device Management (MDM) and Mobile Application Management (MAM) in Intune?

    Answer: MDM enrolls and manages the entire device; MAM protects corporate data within apps without full device enrollment

    MDM requires device enrollment for full device management, while MAM uses App Protection Policies to protect corporate data in apps on unenrolled personal devices.

  2. Which Intune feature prevents users from copying corporate data from a managed app and pasting it into a personal app?

    Answer: App Protection Policy — Restrict cut, copy, and paste

    App Protection Policies include data transfer restrictions that control cut, copy, and paste operations between managed (corporate) and unmanaged (personal) apps.

  3. What is 'MAM without enrollment' (MAM-WE) specifically designed for?

    Answer: Protecting corporate data in Office apps on personal (BYOD) devices that are not enrolled in Intune MDM

    MAM-WE allows App Protection Policies to protect corporate data in supported apps on personal devices without requiring full MDM device enrollment.

  4. Which setting in an Intune App Protection Policy requires users to authenticate with a PIN or biometric before accessing corporate apps?

    Answer: Access requirements — PIN for access

    The 'PIN for access' setting under Access requirements in an App Protection Policy enforces PIN or biometric authentication before accessing the protected app.

  5. An App Protection Policy is set to 'Wipe org data from app' after 5 failed PIN attempts. What data is removed?

    Answer: Only the corporate data and documents within the managed app are removed

    Selective wipe through App Protection Policies removes only the corporate data and tokens within the managed app, leaving personal data intact.

  6. Which App Protection Policy setting prevents users from saving corporate files to personal cloud storage like Google Drive?

    Answer: Save copies of org data — restrict to approved locations only

    The 'Save copies of org data' setting controls where users can save files, restricting saves to approved managed locations like OneDrive for Business.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Retake policy, passing score, fees, time limit, exam information · verified Oct 2026
  2. home.pearsonvue.com — Test delivery · verified Oct 2026