Managing Device and Data Flashcards

Which Intune feature enforces BitLocker encryption on Windows devices and can store the recovery key in Azure AD?

Answer: Endpoint security Disk encryption policy

The Endpoint security Disk encryption policy in Intune enforces BitLocker on Windows devices and can be configured to automatically back up the recovery key to Azure AD.

What is Microsoft Entra ID Conditional Access, and what is a common use case for it in endpoint management?

Answer: A policy engine that grants or blocks resource access based on conditions like device compliance and user identity

Conditional Access is a policy-based engine in Microsoft Entra ID that evaluates signals like device compliance, user risk, and location to decide whether to grant or block access to resources.

An administrator wants to prevent users from copying corporate data from Microsoft 365 apps to personal apps on Windows devices. Which Intune feature addresses this?

Answer: App protection policies (MAM)

App protection policies (Mobile Application Management) in Intune can restrict data transfer between managed apps and unmanaged personal apps, preventing corporate data leakage.

Which tool is used to migrate user files and settings from an old Windows device to a new one during a PC refresh or replacement?

Answer: USMT (User State Migration Tool)

The User State Migration Tool (USMT) is Microsoft's enterprise tool for capturing and restoring user profiles, files, and application settings during PC migrations and OS upgrades.

Which Microsoft Defender feature provides a centralised view of security alerts, threats, and recommendations for managed endpoints?

Answer: Microsoft Defender for Endpoint portal

The Microsoft Defender for Endpoint portal at security.microsoft.com provides a unified security operations view with device inventory, alerts, threat analytics, vulnerability management, and attack surface reduction recommendations.

An administrator needs to remotely remove all corporate data from a user Windows device while leaving personal data intact. Which Intune action achieves this?

Answer: Retire

The Retire action in Intune removes corporate-managed apps, policies, and data from a device while leaving personal data and settings intact, making it suitable for BYOD offboarding.