ITForMe Beta Sign in
MD-102 MD-102 Skills measured July 24, 2026 Manage applications Runs in your browser · no setup Original practice · Review pending

Build a protected BYOD application rollout

Choose app protection, access, and assignment controls without forcing device enrollment.

Estimated14 min
DifficultyBeginner
Points10
Scenario brief

Contractors need Outlook and Teams on personal mobile devices. The company must protect organizational data, block risky devices, and remove only company data when a contract ends.

Content record

Original practice · Review pending

Mapped to Microsoft MD-102 objectives · Internal validation 2026-10-06 · Original ITForMe practice mapped to published objectives; not an official exam question. A named independent subject-matter expert has not yet verified the question and answer key.

Community review →
1.3Implement identity and compliance for devices. 4.2Plan and implement app protection and app configuration policies. 4.1Deploy and update applications.
Show review record and official sources

Method: Mapped to MD-102 objectives 1.3, 4.1, and 4.2; scenario logic and answer feedback checked against current Microsoft Learn documentation.

Current-profile check: 2026-09-30 · Next review due 2026-10-26

01

Inspect the evidence

Use only the information provided to complete the tasks.

Requirements

list
  • ›Personal devices must not be enrolled
  • ›Copying company data to personal apps is blocked
  • ›Access requires a client app that has an app protection policy applied
  • ›Offboarding preserves personal photos and apps
02

Complete the response

Partial credit is available for matching, ordering, and multi-select tasks.

Changes will save automatically.
01
multi select

Select the THREE controls that satisfy the design.

3 pts
Need a hint?

Evaluate each option independently against the scenario evidence instead of treating the list as one decision.

Show another hint

Choose only options that directly satisfy the prompt; being generally true is not enough.

02
matching

Match each requirement to its primary app-protection setting.

3 pts
Need a hint?

Start with the row and choice that have the most distinctive purpose, then use that pair to narrow the rest.

Show another hint

For each remaining pair, explain the relationship in one sentence before selecting it.

03
ordering

Order the Intune offboarding steps. The runbook keeps the contractor's policy assignments until the wipe is confirmed.

4 pts

Drag the rows or use the arrow buttons to reorder.

  1. 1 Confirm the wipe request is no longer pending and is marked completed
  2. 2 Remove the contractor from the app and policy assignment groups
  3. 3 Identify the contractor's devices that run protected apps in the app protection report
  4. 4 Create a selective wipe request for the contractor on each of those devices
Need a hint?

Identify the prerequisite that must happen first and the verification or documentation that belongs last.

Show another hint

For the middle steps, ask what must already be true before each action can safely happen.

Ready to check your work?Unanswered tasks and matches earn no points. A partial submission is scored and saved in your history.
Persistent progress

Attempt history

Every submission is retained. Starting another attempt never replaces or unlocks the previous one.

No attempts yet

Your first submitted score and detailed answer review will appear here.

Community quality control

Question or answer look wrong?

Proposals and votes help staff prioritize review. They never change the scoring key automatically.

Full review queue →
No community corrections yet

Be the first to flag unclear wording, an answer-key issue, or a source that needs another look.

Propose a correction