Manage and secure applications

1. You want to centrally manage the update channel of Microsoft 365 Apps on devices in your organization. Which Microsoft tool is most appropriate for this?

1. Windows Update for Business with channel update policies for Microsoft 365 Apps
2. Microsoft 365 Apps admin center (apps.microsoft.com) with the Office inventory service
3. Microsoft Update Catalog with update classifications for Office enterprise applications
4. Windows Server Update Services (WSUS) with Office channel update approvals

2. Which Conditional Access policy should you configure to require that approved client apps use Intune app protection policies before accessing Exchange Online from iOS/Android devices?

1. A Conditional Access policy with grant control 'Require compliant device'
2. A Conditional Access policy with grant control 'Require app protection policy'
3. A Conditional Access policy with grant control 'Require approved client app'
4. A Conditional Access policy with session control of app-enforced restrictions

3. Which Intune App Protection Policy (APP) setting controls whether users can transfer data from managed apps to unmanaged apps (like personal apps)?

1. Encrypt org data at rest within managed applications
2. Send org data to other apps (Send org data to)
3. Receive data from other apps (Receive data from)
4. Sync data with native device apps like contacts and calendar

4. Which setting in Intune App Protection Policies controls whether corporate data in managed apps should be encrypted?

1. Require device encryption
2. Encrypt org data
3. Minimum security patch level
4. App Conditional Access

5. What is the purpose of the 'Maximum number of PIN attempts' setting in an Intune App Protection Policy?

1. Limit the number of times a user can reset their Microsoft Entra ID PIN within a 24-hour period
2. Define after how many incorrect PIN attempts the corporate data is wiped from the app or the PIN is reset
3. Set the minimum complexity of the app PIN, including minimum length and allowed character types
4. Control how many APP-managed applications the user can open simultaneously on the device

6. Which Intune App Protection Policy (APP) feature requires the user to re-authenticate with biometrics or PIN after a specific period of inactivity in the app?

1. The conditional access reauthentication that requires the user to re-authenticate after a period of inactivity
2. The PIN timeout or the access recheck requirement after an access grace period
3. The encryption of organization data that activates automatically after a prolonged session period
4. The automatic selective wipe of corporate data that runs after a prolonged period of inactivity

7. Which Intune App Protection Policy setting for Android controls whether users can copy and paste text between a managed app and the system keyboard (for autocomplete or clipboard)?

1. The 'Block screenshots' setting that prevents the user from taking screen captures when corporate data is visible in the app
2. The 'Unmanaged keyboards' or 'Block third-party keyboards' setting
3. The 'Send org data to other apps' setting that controls the level of data transfer to apps not managed by APP
4. The 'Data transfer between apps' setting that defines which apps can receive data from applications protected by the APP policy

8. What additional condition can iOS Intune App Protection Policies (APP) include that is not available in Android APP?

1. Require a numeric PIN instead of biometrics to access corporate app data, increasing security through a multi-digit code
2. Requiring Face ID or Touch ID to access the app's corporate data
3. Encrypting app data with an organizational certificate that ensures data confidentiality even if the device is compromised
4. The automatic detection and blocking of screenshot capture of app content to prevent leakage of sensitive corporate information