10.5.5 Security Mobile Device

Jared is a system engineer for an import distribution company that has employees in offices in Europe, Asia, and the United States. He's currently using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) to provide security for all the company's Windows 10 devices. The company has recently established a strong BYOD (Bring Your Own Device) business policy to make sure that sensitive company data is protected on these devices. This policy covers requirements such as using a PIN to unlock the device, public Wi-Fi network disconnection, and device encryption solutions. Jared decides to meet these requirements by creating a security profile using the Microsoft Defender ATP baseline. However, he's been having security issues with devices in a few offices that might require some additional changes before he can finalize the security profile. Which of the following tools can Jared use to find out which offices are having security issues that might require the additional security settings?

Microsoft Secure Score

Microsoft Intune has the ability to enable Device Health Attestation (DHA) for Windows 10 devices (version 1507 or later). Which of the following are requirements for Intune to enable DHA on your Windows 10 devices? (Select two.)

Code integrity, secure boot, and Bitlocker encryption security policies. A TPM chip (version 1.2 or later) for desktops, laptops, and surface devices.

The users in your organization bring their own mobile devices to the office and want to be able to access the network with them. You want to protect your network from malware threats that might be on these devices. You want to make sure these devices meet certain requirements before they can connect to the network. For example, you want them to meet the following criteria: Hardware and Windows startup components are clean. The kernel is not infected with a rootkit. Boot drivers are clean. Which Windows feature can you use to protect your network from malware threats that might be on your users' mobile devices?

Device Health Attestation

Which Windows Defender Advanced Threat Protection (ATP) component can help you detect, investigate, and respond immediately to any vulnerabilities in your system by providing real-time data to remediate security issues?

Endpoint Detection and Response

Jared is a system engineer for an import distribution company that has employees in offices in Europe, Asia, and the United States. All the company's mobile devices are registered in Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. These devices include the following platforms. Microsoft Windows 10 Android Enterprise Apple iPadOS Jared is in the process of combining Microsoft Defender ATP with Intune to add a strong security solution for these mobile devices. He's already completed the following. Verified that all the mobile devices are joined to Azure Active Directory Verified that all the mobile devices are enrolled in Microsoft Intune Connected his Microsoft Defender ATP subscription with Intune Onboarded the mobile devices to Microsoft Defender ATP using a configuration profile Configured a security policy However, after the first week of operation, Jared receives a call from a manager in the New York City office. She complains that she can't access the company customer profile files she needs to conduct business or access the company training app. Which of the following is the MOST likely cause of her access issues?

Her mobile device doesn't comply with the security policy.

You're a system administrator for a financial advisory company, and you want to implement a management service for your Windows 10 devices. You want to be able to perform the following management tasks. Track the Windows 10 devices. Push apps and updates to the Windows 10 devices. Remotely install and update apps as needed. Remotely wipe the Windows 10 devices in case they're lost or stolen. Limit app functionality to meet business requirements. SOLUTION: You install and configure a mobile application management (MAM) service.

No

Jared is a system engineer for an import distribution company that has employees in offices in Europe, Asia, and the United States. He's currently using Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP) to provide security protection for all the company devices. Because the company has offices throughout the world, he's decided to organize the Windows 10 devices into Microsoft Defender ATP device groups to manage their security more easily. Jared has assigned attributes to the device groups, such as domain, computer name, and designated tag and assigned a rank (x) to each group. He decides to start by creating the following groups to organize the devices for the France offices. Paris1: Tag = Management and OS = Windows 10 (1) Paris2: Tag = OfficeStaff and Domain = tradewinds.com (2) Paris3: Domain = tradewinds.com (3) Nice1: OS = Windows 10 and Domain = tradewinds.com (4) Nice2: Tag = Marketing and Domain = tradewinds.com (5) Nice3: Name starts with DEV (6) A new sales employee is hired in the Nice office and assigned a laptop computer with the following configuration. Computer name: device23 Domain: tradewinds.com OS: Windows 10 64-bit When Jared onboards the laptop to Microsoft Defender ATP, which of the following groups will the laptop be assigned to?

Paris3 and Nice3 only

You're a system administrator for a financial advisory company. You've been given the task of creating a Microsoft Edge Security profile for the company's Windows 10 devices that meets the following business security requirements. Employees can't save passwords to the password manager. Only the company-installed antivirus software can display warnings about downloads and suspicious websites. Which of the following Configuration Settings in your Microsoft Edge Security profile do you need to change to meet the company's business security requirements? Click each setting's name in the left column.

Prevent bypass Micro Defender SmartSCreen prompts for sites Prevent bypass of Micro Defend SmartScreen warnings about downloads

Jared is a system engineer for an import distribution company that has employees in offices in Europe, Asia, and the United States. All the company's mobile devices are registered in Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune. These devices include the following platforms. Microsoft Windows 10 Android Enterprise Apple iPadOS Jared is in the process of combining Microsoft Defender ATP with Intune to add a strong security solution for these mobile devices. He's already completed the following. Verified that all the mobile devices are joined to Azure Active Directory Verified that all the mobile devices are enrolled in Microsoft Intune Connected his Microsoft Defender ATP subscription with Intune Onboarded the mobile devices to Microsoft Defender ATP using a configuration profile Configured a security policy After a few weeks, a sales representative in the Paris office sends an email to Jared. He complains that he's being blocked from accessing the business contracts for his customers. During the email thread between Jared and the sales rep, Jared discovers that the sales rep opened a suspicious email attachment, and his laptop is now infected with a Trojan horse. Which of the following is the MOST likely reason for the sales rep not being able to access the customer business contracts?

The laptop's security threat was set to high, and the security policy blocked the access.

Jared is a system engineer for a leading financial institution, and he's decided to use Windows Defender Advanced Threat Protection (ATP) to detect and respond to security threats. Jared is looking for a Defender ATP component or feature that can provide an overall picture of the state of company devices when it comes to applications, operating systems, networks, accounts, and security controls. Which of the following Defender ATP components can provide Jared with this type of information?

Threat and Vulnerability Management