MD-102 Protecting Endpoints with Security Policies

Question 1

Which Microsoft Intune policy type is used to configure Microsoft Defender Antivirus settings on Windows 10 endpoints?

Accepted Answer

Endpoint security – Antivirus policy

Answer

Device compliance policy

Answer

Device configuration profile – Endpoint protection template

Answer

App protection policy

Question 2

An administrator wants to enable BitLocker encryption on all managed Windows 10 devices. Which Intune policy type should be used?

Accepted Answer

Endpoint security – Disk encryption policy

Answer

Device compliance policy

Answer

Windows Information Protection policy

Answer

App configuration policy

Question 3

Which Intune feature integrates with Microsoft Defender for Endpoint to allow Intune compliance policies to use device risk scores?

Accepted Answer

Mobile Threat Defense connector

Answer

Tenant attach

Answer

Microsoft Tunnel

Answer

Endpoint security baseline

Question 4

An organization wants to use a pre-configured set of security settings recommended by Microsoft for Windows 10. What should the admin deploy?

Accepted Answer

Windows 10 security baseline

Answer

Custom OMA-URI settings

Answer

Endpoint detection and response policy

Answer

Windows Update for Business ring

Question 5

Which Windows security feature prevents untrusted applications from running on a device by allowing only signed and trusted software?

Accepted Answer

Windows Defender Application Control (WDAC)

Answer

Windows Firewall

Answer

Windows Defender Credential Guard

Answer

Secure Boot

Question 6

A company wants to prevent users from copying corporate data from managed apps to personal apps on iOS. Which Intune feature should be configured?

Accepted Answer

App protection policy (MAM)

Answer

Device compliance policy

Answer

iOS device restriction profile

Answer

Conditional Access policy