Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

What feature allows you to deploy a new application to users, ensuring only installation on compliant devices?

1. Targeted apps

2. App configuration policies

3. App protection policies

4. App assignments

The correct answer is: App protection policies

The feature that ensures applications are only installed on compliant devices is app protection policies. These policies are designed to control how applications handle corporate data and enforce certain security standards before an application can be used on a device. This might include requiring specific configurations or settings within the application, such as enforcing encryption, requiring authentication, or ensuring that the device meets certain compliance criteria (like being managed or having a specific security posture). App protection policies specifically focus on protecting corporate data across devices, particularly those that may not be entirely managed by an organization's IT department. They help ensure that only devices meeting the compliance requirements can access and use the applications, which is crucial for maintaining data security and integrity. In contrast, targeted apps typically refer to the specific apps that are assigned to certain groups or users, but do not inherently enforce compliance. App configuration policies adjust settings within applications but do not directly manage device compliance for installation. App assignments determine who receives an app but do not ensure whether the device is compliant beforehand. Thus, app protection policies stand out as the mechanism that ties application deployment directly to device compliance.