TESTOUT EXAM 4 2026 SECURITY
FUNDAMENTALS DRILL PACK ANSWER SHEET
◉ Jared is a system engineer for an import distribution company
that has employees in offices in Europe, Asia, and the United States.
All the company's mobile devices are registered in Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
These devices include the following platforms.
Microsoft Windows 10
Android Enterprise
Apple iPadOS
Jared is in the process of combining Microsoft Defender ATP with
Intune to add a strong security solution for these mobile devices.
He's already completed the following.
Verified that all the mobile devices are joined to Azure Active
Directory
Verified that all the mobile devices are enrolled in Microsoft Intune
Connected his Microsoft Defender ATP subscription with Intune
Onboarded the mobile devices to Microsoft Defender ATP using a
configuration profile
,Configured a security policy
However, after the first week of operation, Jared receives a call from
a ma.
Answer: A. Her mobile device doesn't comply with the security
policy.
◉ You want to protect all the files on the hard drive of your
Windows notebook system to prevent unauthorized access. You
want to prevent access to any encrypted file on the hard drive, even
if the hard drive is moved to another computer.
Which feature should you implement?
A. InPrivate
B. Smart card with PIV
C. BitLocker
D. EFS
E. DirectAccess.
Answer: C. BitLocker
Wrong B. Smart card with PIV
,◉ As a system administrator, you manage hundreds of Windows 10
devices using Configuration Manager. Now you would like to co-
manage these devices with cloud-based Azure tools.
What should you do to achieve co-management?
A. Set up Intune and deploy MDM policies.
B. Set up hybrid Azure Active Directory and then enroll the Windows
10 devices into Intune.
C. Create user accounts in Azure Active Directory and then add the
devices.
D. Install the Configuration Manager client on each device..
Answer: B. Set up hybrid Azure Active Directory and then enroll the
Windows 10 devices into Intune.
◉ You need to set up and pre-configure new Windows 10 devices to
get them ready for use and distribution to users. Which Microsoft
cloud-based tool would you use to accomplish this?
A. Microsoft Intune
B. Microsoft Autopilot
C. Microsoft Analytics
D. System Center Configuration Manager.
Answer: B. Microsoft Autopilot
You would use Microsoft Autopilot to set up and pre-configure
Windows 10 devices to ready them for use.
, ◉ You have Windows 10 devices in Azure AD, and they are enrolled
in Intune. What must you do in order to also co-manage the devices
using Configuration Manager?
A. Enroll the devices in Configuration Manager.
B. Install the Intune client on each device.
C. Use Group Policy to point the devices to Configuration Manager.
D. Install the Configuration Manager client on each device..
Answer: D. Install the Configuration Manager client on each device.
◉ Which cloud-based Microsoft tool would you use to reset,
repurpose, and recover devices?
A. Windows Recovery Manager
B. Microsoft Intune
C. Conditional Access policies
D. Windows Autopilot.
Answer: Windows Autopilot
◉ Which Microsoft tool would you download to help you migrate
your group policies to MDM policies?
A. Configuration Manager
B. MMAT (MDM Migration Analysis Tool)
FUNDAMENTALS DRILL PACK ANSWER SHEET
◉ Jared is a system engineer for an import distribution company
that has employees in offices in Europe, Asia, and the United States.
All the company's mobile devices are registered in Microsoft Azure
Active Directory (Azure AD) and enrolled in Microsoft Intune.
These devices include the following platforms.
Microsoft Windows 10
Android Enterprise
Apple iPadOS
Jared is in the process of combining Microsoft Defender ATP with
Intune to add a strong security solution for these mobile devices.
He's already completed the following.
Verified that all the mobile devices are joined to Azure Active
Directory
Verified that all the mobile devices are enrolled in Microsoft Intune
Connected his Microsoft Defender ATP subscription with Intune
Onboarded the mobile devices to Microsoft Defender ATP using a
configuration profile
,Configured a security policy
However, after the first week of operation, Jared receives a call from
a ma.
Answer: A. Her mobile device doesn't comply with the security
policy.
◉ You want to protect all the files on the hard drive of your
Windows notebook system to prevent unauthorized access. You
want to prevent access to any encrypted file on the hard drive, even
if the hard drive is moved to another computer.
Which feature should you implement?
A. InPrivate
B. Smart card with PIV
C. BitLocker
D. EFS
E. DirectAccess.
Answer: C. BitLocker
Wrong B. Smart card with PIV
,◉ As a system administrator, you manage hundreds of Windows 10
devices using Configuration Manager. Now you would like to co-
manage these devices with cloud-based Azure tools.
What should you do to achieve co-management?
A. Set up Intune and deploy MDM policies.
B. Set up hybrid Azure Active Directory and then enroll the Windows
10 devices into Intune.
C. Create user accounts in Azure Active Directory and then add the
devices.
D. Install the Configuration Manager client on each device..
Answer: B. Set up hybrid Azure Active Directory and then enroll the
Windows 10 devices into Intune.
◉ You need to set up and pre-configure new Windows 10 devices to
get them ready for use and distribution to users. Which Microsoft
cloud-based tool would you use to accomplish this?
A. Microsoft Intune
B. Microsoft Autopilot
C. Microsoft Analytics
D. System Center Configuration Manager.
Answer: B. Microsoft Autopilot
You would use Microsoft Autopilot to set up and pre-configure
Windows 10 devices to ready them for use.
, ◉ You have Windows 10 devices in Azure AD, and they are enrolled
in Intune. What must you do in order to also co-manage the devices
using Configuration Manager?
A. Enroll the devices in Configuration Manager.
B. Install the Intune client on each device.
C. Use Group Policy to point the devices to Configuration Manager.
D. Install the Configuration Manager client on each device..
Answer: D. Install the Configuration Manager client on each device.
◉ Which cloud-based Microsoft tool would you use to reset,
repurpose, and recover devices?
A. Windows Recovery Manager
B. Microsoft Intune
C. Conditional Access policies
D. Windows Autopilot.
Answer: Windows Autopilot
◉ Which Microsoft tool would you download to help you migrate
your group policies to MDM policies?
A. Configuration Manager
B. MMAT (MDM Migration Analysis Tool)
