Protecting Endpoints with Security Policies Flashcards

Which Intune endpoint security policy configures Windows Firewall rules on managed devices?

Answer: Endpoint security – Firewall

The Endpoint security Firewall policy in Intune is specifically designed to configure Windows Firewall settings and rules on managed Windows devices.

An administrator wants to ensure that a device's TPM chip is enabled and functioning before allowing access to corporate resources. Which Intune policy type is used?

Answer: Device compliance policy

Device compliance policies in Intune can require that the TPM is enabled and functioning as a compliance requirement before granting conditional access to resources.

Which feature in Microsoft Defender for Endpoint provides behavioral monitoring to detect and stop attacks in real time?

Answer: Endpoint detection and response (EDR)

Endpoint detection and response (EDR) in Microsoft Defender for Endpoint provides behavioral monitoring, detecting suspicious activity and enabling security teams to investigate and respond to threats.

A user is trying to access a phishing website. Which Microsoft Defender for Endpoint feature blocks access to the malicious URL?

Answer: Network protection

Network protection in Microsoft Defender for Endpoint prevents users from accessing malicious websites and IP addresses by blocking network connections to known bad destinations.

Which Intune policy can prevent users from modifying Microsoft Defender Antivirus settings on their Windows 10 devices?

Answer: Tamper protection setting in Antivirus policy

Tamper protection, configured through the Intune Antivirus policy, prevents users and malware from modifying Microsoft Defender Antivirus security settings.

An administrator wants to block USB drives on corporate Windows 10 devices using Intune. Which policy type should be used?

Answer: Endpoint security – Attack surface reduction

Attack surface reduction policies in Intune include removable storage device controls that can block USB drives and other removable media on managed Windows devices.