MD-101 Mobile Application Management and App Protection

Question 1

What is the primary difference between Mobile Device Management (MDM) and Mobile Application Management (MAM) in Intune?

Accepted Answer

MDM enrolls and manages the entire device; MAM protects corporate data within apps without full device enrollment

Answer

MDM manages apps only; MAM manages the entire device

Answer

MDM is for iOS only; MAM is for Android only

Answer

MAM requires device compliance; MDM does not

Question 2

Which Intune feature prevents users from copying corporate data from a managed app and pasting it into a personal app?

Accepted Answer

App Protection Policy — Restrict cut, copy, and paste

Answer

Conditional Access

Answer

Device compliance policy

Answer

Windows Information Protection

Question 3

What is 'MAM without enrollment' (MAM-WE) specifically designed for?

Accepted Answer

Protecting corporate data in Office apps on personal (BYOD) devices that are not enrolled in Intune MDM

Answer

Enrolling devices without user interaction

Answer

Applying compliance policies to unenrolled devices

Answer

Deploying apps to devices that cannot enroll

Question 4

Which setting in an Intune App Protection Policy requires users to authenticate with a PIN or biometric before accessing corporate apps?

Accepted Answer

Access requirements — PIN for access

Answer

Require device lock

Answer

Conditional launch — Max PIN attempts

Answer

Data protection — Encrypt org data

Question 5

An App Protection Policy is set to 'Wipe org data from app' after 5 failed PIN attempts. What data is removed?

Accepted Answer

Only the corporate data and documents within the managed app are removed

Answer

All data including personal data is wiped from the device

Answer

The device is factory reset

Answer

The app is uninstalled and reinstalled

Question 6

Which App Protection Policy setting prevents users from saving corporate files to personal cloud storage like Google Drive?

Accepted Answer

Save copies of org data — restrict to approved locations only

Answer

Block screen capture

Answer

Require managed browser

Answer

Encrypt org data