Module 5
Your network contains an Active Directory domain that is synced to Microsoft Azure Active Directory (Azure AD).You have a Microsoft 365 subscription.You create a conditional access policy for Microsoft Exchange Online.You need to configure the policy to prevent access to Exchange Online unless is connecting from a device that is hybrid Azure AD-joined.Which settings should you configure?
Device state
Your company purchases new computers that run Windows 10. The computers have cameras that support Windows Hello for Business. You configure the Windows Hello for Business Group Policy settings as shown in the following exhibit. What are two valid methods a user can use to sign in? Each correct answer presents part of the solution.
Facial recognition
You have computers that run Windows 10 Pro. The computers are joined to Microsoft Azure Active Directory (Azure AD) and enrolled in Microsoft Intune.You need to upgrade the computers to Windows 10 Enterprise.What should you configure in Intune?
A device configuration profile
You have a Microsoft Azure Active Directory (Azure AD) tenant. All corporate devices are enrolled in Microsoft Intune. You have a web-based application named App1 that uses Azure AD to authenticate. You need to prompt all users of App1 to agree to the protection of corporate data when they access App1 from both corporate and non-corporate devices.What should you configure?
Terms of use in Conditional access
Your company has a Microsoft 365 subscription. The company uses Microsoft Intune to manage all devices. The company uses conditional access to restrict access to Microsoft 365 services for devices that do not comply with the company's security policies.You need to identify which devices will be prevented from accessing Microsoft 365 services.What should you use?
The Device compliance blade in the Intune admin center.
What should you use to meet the technical requirements for Azure DevOps?
Conditional access
