MS-900 - Microsoft 365 Fundamentals Modern Device and Endpoint Management Flashcards

Which Microsoft 365 service is used to manage and secure mobile devices, PCs, and apps from the cloud?

Answer: Microsoft Intune

Microsoft Intune is the cloud-based Mobile Device Management (MDM) and Mobile Application Management (MAM) service within Microsoft 365.

What is the primary function of Microsoft Endpoint Manager?

Answer: Unified platform combining Intune and Configuration Manager for device management

Microsoft Endpoint Manager is the unified console that brings together Microsoft Intune and Configuration Manager for comprehensive endpoint management.

What is 'Mobile Application Management' (MAM) in Microsoft Intune primarily used for?

Answer: Controlling and protecting corporate data within mobile apps without enrolling the device

MAM in Intune lets organizations protect corporate data within apps on personal (BYOD) devices without requiring full device enrollment.

Which Windows 10/11 feature enables devices to be automatically configured and enrolled into management when a user signs in with their Azure AD credentials?

Answer: Windows Autopilot

Windows Autopilot automates device setup and enrollment into Microsoft Intune when users sign in with their organizational credentials, eliminating manual IT imaging.

What does 'Conditional Access' in Microsoft 365 primarily enforce?

Answer: Requiring specific conditions (like compliant device or MFA) before granting access to resources

Conditional Access in Azure AD enforces policies that require users to meet specific conditions—such as MFA or device compliance—before accessing Microsoft 365 resources.

Which Microsoft 365 feature allows organizations to ensure only compliant and healthy devices can access corporate resources?

Answer: Device Compliance Policies in Intune

Device compliance policies in Microsoft Intune define the rules and settings devices must meet, and Conditional Access blocks non-compliant devices from accessing resources.