nerdexam
Microsoft

MD-102 · Question #600

You have a Microsoft 365 subscription and use Microsoft Intune. You need to implement Microsoft Tunnel for Mobile Application Management (MAM) for personal Android devices. You perform the following…

The correct answer is A. an app protection policy. To implement Microsoft Tunnel for Mobile Application Management (MAM) on personal Android devices, you'll need to configure the Microsoft Tunnel gateway, create app protection policies [A], and deploy the Microsoft Defender for Endpoint app. Additionally, you'll need to…

Submitted by chen.hong· Apr 18, 2026Manage applications

Question

You have a Microsoft 365 subscription and use Microsoft Intune. You need to implement Microsoft Tunnel for Mobile Application Management (MAM) for personal Android devices. You perform the following actions:

  • Configure Microsoft Tunnel for managed devices.
  • Validate that user devices meet the prerequisites for Tunnel for MAM.
  • Create app configuration policies for Microsoft Defender and

Microsoft Edge. What should you configure next?

Options

  • Aan app protection policy
  • Ba custom profile for Android Enterprise devices
  • Ca Conditional Access policy
  • Da VPN profile for Android Enterprise devices

How the community answered

(49 responses)
  • A
    86% (42)
  • B
    4% (2)
  • C
    2% (1)
  • D
    8% (4)

Explanation

To implement Microsoft Tunnel for Mobile Application Management (MAM) on personal Android devices, you'll need to configure the Microsoft Tunnel gateway, create app protection policies [A], and deploy the Microsoft Defender for Endpoint app. Additionally, you'll need to configure the app configuration policy to use the Tunnel for MAM settings. Note: Microsoft Tunnel for Mobile Application Management for Android To extend your existing Microsoft Tunnel configuration to support MAM, create and deploy three profiles that configure this support on your unenrolled devices: * App configuration policy for Microsoft Defender. This policy configures Microsoft Defender for Endpoint on a device as the VPN tunnel client app. * App configuration policy for Microsoft Edge. This policy configures Microsoft Edge to support identity-switch, which automatically connects and disconnects the VPN tunnel when switching from a Microsoft "Work or school" account to a Microsoft "personal account" in Microsoft Edge. * App protection policy to automatically start the connection to Microsoft Tunnel when the MAM enabled app on the device accesses corporate resources. https://learn.microsoft.com/en-us/intune/intune-service/protect/microsoft-tunnel-mam-android

Topics

#Microsoft Tunnel#Mobile App Management#App Protection Policy#Android

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice