Mobility and Device Fundamentals Flashcards

What is the purpose of a device compliance policy in Microsoft Intune?

Answer: Defining the required security settings a device must have to be considered compliant

Compliance policies define minimum security requirements (such as PIN length, encryption, OS version) that managed devices must meet to access corporate resources.

What is containerization in mobile device management?

Answer: Separating personal and corporate data on a device into isolated environments

Containerization creates a secure, isolated workspace on a personal device that separates corporate apps and data from personal content, protecting both privacy and corporate data.

What is the primary security risk of using public Wi-Fi networks on mobile devices?

Answer: Exposure to man-in-the-middle attacks and data interception

Public Wi-Fi networks are often unsecured, making them vulnerable to man-in-the-middle attacks where attackers can intercept and read unencrypted network traffic.

What feature in Windows 10/11 allows enterprise devices to be automatically enrolled in MDM when joined to Azure AD?

Answer: Auto-enrollment

MDM auto-enrollment automatically enrolls devices in Microsoft Intune when users sign in with their Azure AD credentials or when the device joins Azure AD.

What does 'jailbreaking' or 'rooting' a mobile device do from a security perspective?

Answer: Removes manufacturer restrictions, bypassing security controls and voiding support

Jailbreaking (iOS) or rooting (Android) bypasses the OS security model and manufacturer restrictions, exposing the device to malware and preventing MDM compliance enforcement.

What is Windows Hello for Business?

Answer: A passwordless authentication solution using biometrics or PIN tied to a device

Windows Hello for Business replaces passwords with strong two-factor authentication using a PIN or biometric (fingerprint/face) backed by a cryptographic key tied to the device.