Microsoft 365 Mobility and Security (legacy) — Question 65

You have a Microsoft 365 tenant that contains 1,000 Windows 10 devices. The devices are enrolled in Microsoft Intune.
Company policy requires that the devices have the following configurations:
✑ Require complex passwords.
✑ Require the encryption of removable data storage devices.
✑ Have Microsoft Defender Antivirus real-time protection enabled.
You need to configure the devices to meet the requirements.
What should you use?

Answer options

• A. an app configuration policy
• B. a compliance policy
• C. a security baseline profile
• D. a conditional access policy

Correct answer: C

Explanation

The correct answer is C, a security baseline profile, as it is specifically designed to enforce security settings across devices, including password complexity and antivirus settings. Options A and B do not enforce the required security configurations comprehensively, while D pertains to access controls rather than device configuration.