nerdexam
Microsoft

MD-102 · Question #415

You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune. You need to prevent the printing of corporate data from managed apps on the devices. What should…

The correct answer is C. an app protection policy. The correct answer is C - an app protection policy (APP). App protection policies are Intune's mechanism for controlling what users can do with corporate data within managed apps on mobile devices, including restricting printing, blocking copy/paste to personal apps, preventing…

Submitted by packet_pusher· Apr 18, 2026Manage applications

Question

You have a Microsoft 365 subscription that contains 1,000 iOS devices and includes Microsoft Intune. You need to prevent the printing of corporate data from managed apps on the devices. What should you configure?

Options

  • Aan app configuration policy
  • Ba security baseline
  • Can app protection policy
  • Dan iOS app provisioning profile

How the community answered

(45 responses)
  • A
    16% (7)
  • B
    2% (1)
  • C
    73% (33)
  • D
    9% (4)

Explanation

The correct answer is C - an app protection policy (APP). App protection policies are Intune's mechanism for controlling what users can do with corporate data within managed apps on mobile devices, including restricting printing, blocking copy/paste to personal apps, preventing saving to personal storage, and similar data loss prevention controls. Option A (app configuration policy) is used to preconfigure app settings and behavior but does not provide data protection controls. Option B (security baseline) applies device-level security settings, not app-level data restrictions. Option D (iOS app provisioning profile) manages app certificate lifecycle and distribution - it has no data protection enforcement capability.

Topics

#app protection policy#MAM#data loss prevention#iOS

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice