Practice Test GeeksMD-102 - Endpoint Administrator Exam Practice Test
← All MD-102 Flashcard Decks

Protecting Endpoints with Security Policies Flashcards

6 cards from real MD-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Protecting Endpoints with Security Policies flashcards as text

  1. Which Microsoft Intune policy type is used to configure Microsoft Defender Antivirus settings on Windows 10 endpoints?

    Answer: Endpoint security – Antivirus policy

    Endpoint security Antivirus policies in Intune are specifically designed to configure Microsoft Defender Antivirus settings on managed Windows endpoints.

  2. An administrator wants to enable BitLocker encryption on all managed Windows 10 devices. Which Intune policy type should be used?

    Answer: Endpoint security – Disk encryption policy

    Endpoint security Disk encryption policies in Intune configure BitLocker settings and enforce drive encryption on Windows 10/11 managed devices.

  3. Which Intune feature integrates with Microsoft Defender for Endpoint to allow Intune compliance policies to use device risk scores?

    Answer: Mobile Threat Defense connector

    The Mobile Threat Defense (MTD) connector in Intune integrates with Defender for Endpoint to feed device risk scores into compliance policy evaluation.

  4. An organization wants to use a pre-configured set of security settings recommended by Microsoft for Windows 10. What should the admin deploy?

    Answer: Windows 10 security baseline

    Windows 10 security baselines in Intune provide Microsoft-recommended security configuration settings that can be deployed to managed devices with minimal customization.

  5. Which Windows security feature prevents untrusted applications from running on a device by allowing only signed and trusted software?

    Answer: Windows Defender Application Control (WDAC)

    Windows Defender Application Control (WDAC) enforces code integrity policies that allow only trusted and signed applications to execute on Windows devices.

  6. A company wants to prevent users from copying corporate data from managed apps to personal apps on iOS. Which Intune feature should be configured?

    Answer: App protection policy (MAM)

    App protection policies (MAM) in Intune control data transfer between managed and unmanaged apps, preventing corporate data from being pasted or saved to personal apps on iOS.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Renewal, score validity, score release, eligibility, fees, time limit, exam format · verified Nov 2026
  2. home.pearsonvue.com — Test delivery · verified Nov 2026