Managing Device and Data Flashcards

Which Intune setting enables administrators to enforce a minimum PIN length or password complexity on Windows devices as part of a device compliance policy?

Answer: Device compliance System security settings

Device compliance policies in Intune include system security settings where administrators can define requirements for password type, minimum length, complexity, and expiry for Windows devices.

What is the purpose of the Intune Enrollment Status Page block phase in relation to device apps and policies?

Answer: It ensures required apps and policies are installed before the user accesses the device

The ESP block phase prevents users from accessing the device desktop until all tracked applications, certificates, and policies specified by the administrator have been successfully installed.

Which Azure AD (Entra ID) feature allows an administrator to immediately revoke all active sessions across devices when a security incident is detected?

Answer: Revoke user sign-in sessions action

The Revoke sessions action in Azure AD immediately invalidates all refresh tokens and active sessions for a user, forcing re-authentication on all devices and apps.

An organisation wants to ensure that only devices with a specific minimum OS version can access corporate email. Which combination of Intune features achieves this?

Answer: Device compliance policy with OS version requirement and Conditional Access policy

A device compliance policy defines the minimum OS version requirement and a Conditional Access policy grants email access only to compliant devices, blocking devices running older OS versions.

What is Windows Information Protection (WIP) designed to do?

Answer: Separate and protect corporate data from personal data on Windows devices without requiring full MDM enrollment

Windows Information Protection (WIP) provides data separation on Windows devices, tagging corporate data and restricting how it can be shared or copied to non-corporate apps, without requiring full MDM enrollment.

Which Intune action performs a full factory reset of a company-owned Windows device to prepare it for redeployment?

Answer: Wipe

The Wipe action in Intune performs a full factory reset of the device, removing all data, apps, and settings, preparing it for redeployment or decommission.