Endpoint Administrator Device Compliance Policies

1. Match each compliance action with its description:

Mark non-compliant

Block access

Retire device

Submit

2. Which compliance action would be most appropriate for a sensitive corporate environment?

Block access to all corporate resources

Send notification only

Mark as non-compliant and apply conditional access

Ignore non-compliance

3. True or False: A device can be marked non-compliant due to a policy that has not been assigned to it.

True

False

4. When should you assign compliance policies to device groups?

Only during initial device enrollment

Immediately after creating the policy

Only after testing in a pilot group

Never; they are assigned automatically

Submit

6. Which of these are compliance monitoring capabilities? (Select all that apply)

Real-time compliance dashboard

Compliance reports by user or device

Automated remediation actions

Predictive compliance forecasting

Submit

7. True or False: Non-compliant devices can still access SharePoint and Teams if conditional access is not configured.

True

False

8. Which compliance policy setting would require devices to disable developer mode?

Device restrictions policy

Security compliance setting

Platform-specific configuration

Application management policy

Submit

10. What is the main advantage of using security baselines over manual policy configuration?

Faster deployment and consistency across devices

Lower licensing costs

Automatic malware removal

Increased network speed

11. What is the primary purpose of device compliance policies in Microsoft Endpoint Manager?

To enforce security settings and ensure devices meet organizational standards

To automatically update all device drivers

To replace antivirus software on managed devices

To monitor network bandwidth usage

12. Which setting would enforce that all devices must have BitLocker enabled?

Encryption policy

Device protection compliance setting

Security baseline assignment

Conditional access rule

13. True or False: A device can be compliant with one policy but non-compliant with another simultaneously.

True

False

Submit

15. Device compliance policies can be deployed to which of the following? (Select all that apply)

Windows 10 and Windows 11

MacOS devices

Android and iOS devices

Linux servers

Submit

16. What is conditional access in the context of device compliance?

A feature that blocks non-compliant devices from accessing organizational resources

A random security check performed on devices

A backup mechanism for compliance policies

A manual approval process for device enrollment

17. Which compliance setting would you use to require devices to have a minimum password length?

Device security policy

Password compliance setting

System security baseline

Local security policy

Submit

19. In Endpoint Manager, what happens when a device fails to meet compliance policy requirements?

The device is immediately wiped

The device is marked as non-compliant and conditional access rules apply

A warning email is sent, but no action is taken

The device is automatically unenrolled

20. Which of the following is NOT a typical compliance policy setting for Windows 10 devices?

Minimum OS version requirement

Firewall status enforcement

Device encryption requirement

Monitor refresh rate configuration

Endpoint Administrator Device Compliance Policies Quiz

1. Match each compliance action with its description:

2.

What first name or nickname would you like us to use?

2. Which compliance action would be most appropriate for a sensitive corporate environment?

3. True or False: A device can be marked non-compliant due to a policy that has not been assigned to it.

4. When should you assign compliance policies to device groups?

5. A compliance policy that requires Antivirus software to be active is an example of a ____.

6. Which of these are compliance monitoring capabilities? (Select all that apply)

7. True or False: Non-compliant devices can still access SharePoint and Teams if conditional access is not configured.

8. Which compliance policy setting would require devices to disable developer mode?

9. Compliance policies in Endpoint Manager are evaluated at ____.

10. What is the main advantage of using security baselines over manual policy configuration?

11. What is the primary purpose of device compliance policies in Microsoft Endpoint Manager?

12. Which setting would enforce that all devices must have BitLocker enabled?

13. True or False: A device can be compliant with one policy but non-compliant with another simultaneously.

14. The grace period in a compliance policy allows devices ____.

15. Device compliance policies can be deployed to which of the following? (Select all that apply)

16. What is conditional access in the context of device compliance?

17. Which compliance setting would you use to require devices to have a minimum password length?

18. Configuration baselines in Endpoint Manager are used to ____.

19. In Endpoint Manager, what happens when a device fails to meet compliance policy requirements?

20. Which of the following is NOT a typical compliance policy setting for Windows 10 devices?