Prevent Data Copy Paste Between Excel and Other Apps
Short answer
A Configure an app protection policy to restrict data transfer and clipboard usage between managed apps like Excel and other applications.
Question
Key Takeaways
The question tests the specific capability of App Protection Policies to restrict data transfer mechanisms like clipboard sharing between managed and unmanaged applications.
To prevent data cut, copy, and paste operations between Microsoft Excel and other apps on iOS devices using Intune, you must configure an app protection policy. This policy enforces data loss prevention (DLP) controls specifically for managed apps.
Common mistake: Many candidates mistakenly select 'policies for Microsoft Office apps' because they assume Office-specific settings handle cross-app data flow, but DLP controls are centralized in App Protection Policies.
Expert Analysis
Why the Answer Is Correct
An App Protection Policy (APP) is the correct configuration for enforcing Data Loss Prevention (DLP) rules within managed apps on iOS devices. Specifically, APPs allow administrators to define restrictions on data transfer, such as preventing users from copying corporate data from a managed app (like Excel) to an unmanaged app or system-wide clipboard. This ensures that sensitive information remains contained within the managed environment.
Why the Other Options Are Wrong
App Configuration Policies (Option B) are used to deploy custom settings and preferences to apps (e.g., setting a default server URL), but they do not enforce security boundaries or DLP rules like clipboard restrictions. iOS App Provisioning Profiles (Option C) are primarily for installing and managing app entitlements and certificates, not for runtime data protection. While 'policies for Microsoft Office apps' (Option D) might seem relevant, the granular control over inter-app data movement is a feature of the broader Intune App Protection framework, which applies to all supported managed apps including Office.
Community Comment Notes
Community consensus strongly supports Option A. As noted by user Merrybob, official Microsoft documentation confirms that App Protection Policies include features for preventing users from copying and pasting corporate data into personal apps. Other commenters like krzysiek321 and Krayzr simply verified the correctness of this answer without adding conflicting technical details.
Official Reference
This link opens the official vendor documentation in a new tab.
Exam Strategy
When dealing with data security and isolation in Intune, always look for 'App Protection Policy' first. It is the primary tool for DLP tasks like encryption, authentication, and restricting data transfer between apps.
Frequently Asked Questions
Why not use App Configuration Policies for this?
Does this work for Android too?
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
Merrybob 👍 3 Answered AA. an app protection policy Ref: https://learn.microsoft.com/en-us/mem/intune/apps/app-protection-policy#how-app-protection-policies-protect-app-data+:~:text=Preventing%20users%20from%20copying%20and%20pasting%20corporate%20data%20into%20personal%20apps
-
krzysiek321 👍 2correct - A
-
Krayzr 👍 1 Answered ACorrect
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All MD-102 Questions
Access 92 questions with complete answers and detailed explanations.
View Full MD-102 Practice Test →