MS-500 Endpoint Security & Device Management

Question 1

Which Microsoft 365 service is the primary Mobile Device Management (MDM) and Mobile Application Management (MAM) solution for managing and securing endpoints?

Accepted Answer

Microsoft Intune

Answer

Microsoft Defender for Endpoint

Answer

Azure AD Join

Answer

Microsoft Endpoint Configuration Manager

Question 2

What is the primary purpose of a Device Compliance Policy in Microsoft Intune?

Accepted Answer

To define rules that devices must satisfy to be considered compliant

Answer

To push applications to enrolled devices

Answer

To encrypt device storage automatically

Answer

To configure Wi-Fi and VPN settings on devices

Question 3

Which Microsoft Defender for Endpoint capability allows a security analyst to isolate a compromised device from the network while keeping the management channel active?

Accepted Answer

Network Isolation (Contain Device)

Answer

Live Response

Answer

Automated Investigation and Remediation

Answer

Attack Surface Reduction

Question 4

When an Intune-managed device is marked as non-compliant, what typically happens when Conditional Access policies are enforced?

Accepted Answer

The user is blocked from accessing corporate resources

Answer

The device is immediately wiped remotely

Answer

An SMS alert is sent to the device user

Answer

The device is automatically remediated and marked compliant

Question 5

Which hardware security component does Microsoft Intune use for Windows device health attestation to verify the integrity of the boot process?

Accepted Answer

Trusted Platform Module (TPM)

Answer

BitLocker Encryption Chip

Answer

Windows Hello for Business

Answer

Secure Boot UEFI Firmware

Question 6

Which Windows provisioning feature in Microsoft 365 automates the out-of-box experience to join devices to Azure AD and enroll them in Intune without IT imaging?

Accepted Answer

Windows Autopilot

Answer

Microsoft Endpoint Configuration Manager task sequences

Answer

Intune bulk enrollment

Answer

Azure AD device registration

Question 7

Which Apple enrollment mechanism, integrated with Apple Business Manager, allows IT to automatically enroll corporate-owned iOS/iPadOS devices into Intune before they reach end users?

Accepted Answer

Automated Device Enrollment (formerly DEP)

Answer

Apple Configurator with user affinity

Answer

BYOD Web Enrollment Portal

Answer

Apple Volume Purchase Program (VPP)