A company permits personal phones but needs to protect corporate information within supported apps. Full-device enrollment is outside the requirement. Which design fits?

Choose the single best answer.

A.Device compliance policy without app protection on the unmanaged phones
B.Intune app protection policies with suitable access requirements
C.Full-device configuration profiles requiring MDM enrollment
D.Conditional Access requiring only MFA without app-data controls

Show the answer and explanation

✓ Correct answer

Intune app protection policies with suitable access requirements

App protection policies govern corporate data in supported apps and can pair with suitable access requirements. A compliance-only policy does not supply app-data controls on these unmanaged phones. Full-device configuration requires enrollment beyond the stated scope. MFA authenticates users but does not govern copying or handling corporate app data.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.