MS-102 Microsoft 365 Administrator Expert Managing Intune and Device Compliance 3

Question 1

What is the key difference between Intune App Protection Policies (APP/MAM) and device compliance policies?

Accepted Answer

APP protects organizational data within apps without requiring device enrollment in Intune

Answer

App Protection Policies (MAM) protect corporate data within managed apps on any device — including unenrolled personal devices — without requiring full device management through Intune enrollment.

Question 2

An organization wants to prevent users from pasting content from the corporate Outlook mobile app into a personal notes app on their iOS device. Which Intune feature should be configured?

Accepted Answer

App protection policy with data transfer restrictions

Answer

App protection policies include Data transfer settings that can restrict cut, copy, and paste between policy-managed and unmanaged apps, preventing data leakage to personal applications.

Question 3

What is 'co-management' in the context of Microsoft Intune and Microsoft Endpoint Configuration Manager (MECM)?

Accepted Answer

Sharing device management workloads between Configuration Manager and Intune simultaneously

Answer

Co-management connects existing ConfigMgr-managed Windows devices to Intune and allows organizations to progressively shift specific management workloads (e.g., Compliance, Device Configuration) from on-premises ConfigMgr to cloud-based Intune.

Question 4

Which Microsoft Intune capability uses machine learning to provide insights into device startup performance, app reliability, and recommendations to improve end-user experience?

Accepted Answer

Endpoint analytics

Answer

Endpoint analytics analyzes device startup performance, policy processing times, app reliability scores, and other metrics, using machine learning to surface actionable recommendations.

Question 5

When an administrator performs a 'Fresh Start' remote action on a Windows 10/11 device in Intune, what is the outcome?

Accepted Answer

Windows is reinstalled, OEM pre-installed apps are removed, and user data can optionally be retained

Answer

Fresh Start reinstalls a clean version of Windows 10/11, removes OEM bloatware, and gives the administrator the option to keep the user's personal files while ensuring a clean OS state.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Microsoft 365 Administrator Expert Managing Intune and Device Compliance 3