MS-500 Endpoint Security & Device Management

Question 1

Which Microsoft 365 service is the primary Mobile Device Management (MDM) and Mobile Application Management (MAM) solution for managing and securing endpoints?

Accepted Answer

Microsoft Intune

Answer

Microsoft Intune is the cloud-based MDM/MAM solution in Microsoft 365 used to manage and secure devices and apps.

Question 2

What is the primary purpose of a Device Compliance Policy in Microsoft Intune?

Accepted Answer

To define rules that devices must satisfy to be considered compliant

Answer

Device Compliance Policies define health and security rules (e.g., OS version, encryption, PIN) that devices must meet to be considered compliant.

Question 3

Which Microsoft Defender for Endpoint capability allows a security analyst to isolate a compromised device from the network while keeping the management channel active?

Accepted Answer

Network Isolation (Contain Device)

Answer

Network Isolation (Contain Device) cuts off all network connections except the Defender for Endpoint management channel, keeping investigative access intact.

Question 4

When an Intune-managed device is marked as non-compliant, what typically happens when Conditional Access policies are enforced?

Accepted Answer

The user is blocked from accessing corporate resources

Answer

Conditional Access evaluates compliance status and blocks non-compliant devices from accessing corporate resources such as Exchange Online and SharePoint.

Question 5

Which hardware security component does Microsoft Intune use for Windows device health attestation to verify the integrity of the boot process?

Accepted Answer

Trusted Platform Module (TPM)

Answer

The Trusted Platform Module (TPM) stores cryptographic measurements of the boot process, which Intune uses to attest that a device booted securely.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Endpoint Security & Device Management