Managing Modern Desktops (legacy) — Question 23

Your company has a Microsoft 365 subscription.
You have enrolled all the company computers in Microsoft Intune.
You have been tasked with making sure that devices with a high Windows Defender Advanced Threat Protection (Windows Defender ATP) risk score are locked.
Which of the following actions should you take?

Answer options

• A. You should create a device configuration profile.
• B. You should create a device compliance policy.
• C. You should create a Windows AutoPilot deployment profile.
• D. You should create a conditional access policy.

Correct answer: B

Explanation

The correct answer is B because creating a device compliance policy allows you to enforce compliance settings based on the risk score of the devices. Options A, C, and D do not specifically address the requirement to lock devices based on their Windows Defender ATP risk score.