Modern Desktop Administrator Practice Test

1. Which Azure AD feature allows you to enforce multi-factor authentication for specific users or applications?

Conditional Access

Device Compliance

Mobile Device Management

Windows Hello for Business

2. What is the primary purpose of Intune in a modern desktop environment?

Cloud-based device and application management

On-premises file server management

Active Directory user account provisioning

Local group policy enforcement only

3. Which protocol does Windows Hello for Business use for authentication?

NTLM

Public key cryptography

Kerberos only

Basic authentication

4. Azure AD Join allows devices to be managed without a domain controller. True or False?

True

False

5. Which Microsoft Endpoint Manager component specifically handles software deployment and updates?

Configuration Manager

Device compliance policies

Conditional Access

App protection policies

6. What does Microsoft Defender for Endpoint provide for modern desktops?

Threat detection and response capabilities

Network file sharing only

User account management

Email filtering exclusively

7. Device compliance policies in Intune can enforce password complexity requirements. True or False?

True

False

8. Which feature allows administrators to remotely wipe corporate data from a lost device?

Mobile Device Management (MDM)

Group Policy Objects

Windows Defender SmartScreen

BitLocker encryption only

9. Azure AD Hybrid Join requires both Azure AD and on-premises Active Directory. True or False?

True

False

10. What is the primary function of Windows Update for Business?

Control deployment timing and servicing branches

Block all Windows updates automatically

Manage only security patches

Encrypt device storage exclusively

11. Which authentication method is most resistant to phishing attacks in modern desktop environments?

Windows Hello for Business

Username and password

Security questions

PIN only

12. Intune app protection policies can enforce data loss prevention even on unmanaged devices. True or False?

True

False

13. Which service provides real-time threat intelligence and vulnerability management for Windows devices?

Microsoft Defender Vulnerability Management

Windows Defender SmartScreen

BitLocker Device Encryption

Device Compliance Policies

14. Conditional Access policies can block sign-in attempts from non-compliant devices. True or False?

True

False

15. Which deployment method in Intune allows for phased rollout of applications across user groups?

Staged deployment

Immediate deployment only

Manual installation exclusively

Windows Update channels

Microsoft Modern Desktop Administrator Practice Test

1. Which Azure AD feature allows you to enforce multi-factor authentication for specific users or applications?

2.

What first name or nickname would you like us to use?

2. What is the primary purpose of Intune in a modern desktop environment?

3. Which protocol does Windows Hello for Business use for authentication?

4. Azure AD Join allows devices to be managed without a domain controller. True or False?

5. Which Microsoft Endpoint Manager component specifically handles software deployment and updates?

6. What does Microsoft Defender for Endpoint provide for modern desktops?

7. Device compliance policies in Intune can enforce password complexity requirements. True or False?

8. Which feature allows administrators to remotely wipe corporate data from a lost device?

9. Azure AD Hybrid Join requires both Azure AD and on-premises Active Directory. True or False?

10. What is the primary function of Windows Update for Business?

11. Which authentication method is most resistant to phishing attacks in modern desktop environments?

12. Intune app protection policies can enforce data loss prevention even on unmanaged devices. True or False?

13. Which service provides real-time threat intelligence and vulnerability management for Windows devices?

14. Conditional Access policies can block sign-in attempts from non-compliant devices. True or False?

15. Which deployment method in Intune allows for phased rollout of applications across user groups?