Microsoft 365 Endpoint AdministratorManage devices and apps (55-60%)Medium
A Microsoft 365 Endpoint Administrator is managing Windows 11 devices with Microsoft Intune. The company requires a specific set of security configurations, including firewall rules, Windows Defender settings, and BitLocker encryption, to be consistently applied across all devices. The administrator wants to ensure that these settings are applied according to industry best practices and are automatically updated by Microsoft. Which Intune feature should be used?
- ASecurity baselines
- BEndpoint security policies
- CCustom OMA-URI profiles
- DDevice configuration profiles
Show answer & explanationAnswer & explanation
Correct answer: A. Security baselines
Security baselines in Intune are pre-configured groups of Windows settings that help secure devices according to industry best practices, such as those recommended by Microsoft and CIS. They are automatically updated by Microsoft, ensuring devices remain compliant with evolving security standards without manual intervention for each individual setting.
Why the other options are wrong
- B. Endpoint security policies offer granular control over specific security areas (e.g., antivirus, firewall) but don't provide the holistic, automatically updated best-practice approach of security baselines.
- C. Custom OMA-URI profiles are for deploying non-standard or missing settings, not for applying a comprehensive, industry-standard, and automatically updated security configuration.
- D. Device configuration profiles allow granular control over individual settings but require manual configuration and maintenance for each setting, and don't automatically update with best practices.
Intune Security Baselines
Pre-configured groups of Microsoft-recommended security settings for Windows devices that enforce industry best practices and are automatically updated by Microsoft.
- Based on Microsoft security recommendations
- Automatically updated by Microsoft
- Provides a consistent security posture
- Includes settings for Defender, Firewall, BitLocker, etc.
Memory trick: Baselines Build Best Security, Automatically Updated, Guaranteed.