Microsoft 365 Endpoint AdministratorManage identity and compliance (10-15%)Easy
An organization uses Microsoft Intune to manage its corporate-owned iOS devices. A new security policy requires that all iOS devices must have a passcode set, and this passcode must meet a minimum complexity requirement. Additionally, if a device is found to be non-compliant with this passcode policy, it should automatically be marked as non-compliant in Intune. Which Intune configuration should the administrator use to implement this policy?
- ADeploy a custom PowerShell script via Intune.
- BCreate a device restriction profile for iOS.
- CConfigure a compliance policy for iOS.
- DSet up an App Protection Policy (APP) for iOS.
Show answer & explanationAnswer & explanation
Correct answer: C. Configure a compliance policy for iOS.
Compliance policies in Intune are specifically designed to define the conditions that devices must meet to be considered compliant, such as passcode requirements. They also include actions for non-compliance.
Why the other options are wrong
- A. PowerShell scripts are primarily for Windows devices and are not the standard method for enforcing iOS passcode policies or compliance reporting.
- B. Device restriction profiles configure specific settings on devices, but they don't inherently mark a device as non-compliant if the user bypasses or changes the setting after the profile is applied.
- D. App Protection Policies (APP) protect data within apps, typically on unmanaged devices, and do not enforce device-level passcode requirements or declare device compliance.
Intune Compliance Policy
A set of rules in Microsoft Intune that devices must meet to be considered compliant. Non-compliant devices can be restricted from accessing corporate resources.
- Defines device health and configuration requirements.
- Can include settings for passcodes, OS versions, encryption, and jailbreak detection.
- Integrates with Conditional Access to enforce access for compliant devices only.
Memory trick: Compliance checks the box, securing my device's lock.