Endpoint Security Policies Quiz

1. What is the primary benefit of using device groups in Intune policies?

Reduced licensing costs

Simplified policy assignment to multiple devices

Automatic backup of all data

Elimination of security threats

2. What does the term 'co-management' mean in the context of Windows 10/11 devices?

Multiple users managing one device

Configuration Manager and Intune managing the same device

Two separate IT teams controlling endpoints

Shared device licensing model

3. In Intune, which policy type is used to manage Windows updates on enrolled devices?

Device configuration policy

Update for Business policy

Compliance policy

Security baseline

4. What is the primary advantage of using Mobile Device Management (MDM) enrollment over basic device registration?

Lower cost only

Full device configuration and policy enforcement

Faster internet speeds

Automatic virus removal

5. Which Azure AD feature allows you to require device compliance before granting access to resources?

Password policy

Conditional Access

User roles

Group membership

6. In Intune, what is the role of a 'remediation script'?

To delete non-compliant devices

To automatically fix compliance issues on devices

To report security breaches only

To backup user files

7. Which setting prevents users from changing security policies on their enrolled devices?

User rights assignment

Device restrictions policy with admin restrictions enabled

Firewall configuration

Network segmentation

8. What does 'device registration' in Azure AD enable?

Automatic software installation

Device identity for conditional access policies

Mandatory disk encryption

Unlimited cloud storage

9. In endpoint security, what is the purpose of attack surface reduction rules?

To block all external network access

To reduce vulnerable entry points for malware

To encrypt all user data

To disable Windows Defender

10. Which Intune policy type allows you to control which apps users can install on their devices?

Device configuration policy

App protection policy

Compliance policy

Update policy

11. Which Microsoft service allows you to enforce device compliance and conditional access policies across enrolled endpoints?

Azure AD

Microsoft Intune

Windows Defender

Configuration Manager

12. Which authentication method is required for Azure AD Conditional Access to work effectively?

Only username and password

Device identity and user identity

Biometric authentication only

Physical security keys only

13. In Intune, what is the function of a security baseline?

To track user login attempts

To provide recommended security settings for devices

To block all internet access

To delete non-compliant devices

14. What does BitLocker encryption in a compliance policy ensure?

Data is encrypted at rest on the device

Network traffic is always encrypted

User passwords are hidden

Cloud backups are protected only

15. Which Intune feature allows you to deploy settings and configurations to groups of devices automatically?

Device groups

Configuration profiles

User enrollment

Manual provisioning

16. What is Windows Hello for Business primarily designed to replace?

Antivirus software

Password-based authentication

VPN connections

Firewall rules

17. Which setting in Intune allows you to require a minimum OS version on enrolled devices?

Device restrictions policy

Compliance policy

Update policy

Security baseline

18. In Azure AD Conditional Access, what does the 'Require multi-factor authentication' control enforce?

Users must use two different passwords

Users must provide two or more verification methods

Users must change their password twice daily

Users must use only biometric authentication

19. Which of the following is a valid action for non-compliant devices in Intune?

Mark as compliant automatically

Send a notification and remediate the device

Ignore the non-compliance

Delete the device record

20. What is the primary purpose of a device compliance policy in Intune?

To encrypt all user files automatically

To ensure devices meet security requirements before accessing corporate resources

To manage user passwords exclusively

To block all external devices from the network

Endpoint Administrator Endpoint Security Policies Quiz

1. What is the primary benefit of using device groups in Intune policies?

2.

What first name or nickname would you like us to use?

2. What does the term 'co-management' mean in the context of Windows 10/11 devices?

3. In Intune, which policy type is used to manage Windows updates on enrolled devices?

4. What is the primary advantage of using Mobile Device Management (MDM) enrollment over basic device registration?

5. Which Azure AD feature allows you to require device compliance before granting access to resources?

6. In Intune, what is the role of a 'remediation script'?

7. Which setting prevents users from changing security policies on their enrolled devices?

8. What does 'device registration' in Azure AD enable?

9. In endpoint security, what is the purpose of attack surface reduction rules?

10. Which Intune policy type allows you to control which apps users can install on their devices?

11. Which Microsoft service allows you to enforce device compliance and conditional access policies across enrolled endpoints?

12. Which authentication method is required for Azure AD Conditional Access to work effectively?

13. In Intune, what is the function of a security baseline?

14. What does BitLocker encryption in a compliance policy ensure?

15. Which Intune feature allows you to deploy settings and configurations to groups of devices automatically?

16. What is Windows Hello for Business primarily designed to replace?

17. Which setting in Intune allows you to require a minimum OS version on enrolled devices?

18. In Azure AD Conditional Access, what does the 'Require multi-factor authentication' control enforce?

19. Which of the following is a valid action for non-compliant devices in Intune?

20. What is the primary purpose of a device compliance policy in Intune?