Let's review some additional topics and scenarios you might encounter in the exam that help you to improve your Windows 10 Enterprise security:
- Identity and access management:
- Windows Hello for Business allows you to enable two-factor authentication with a biometric (such as facial recognition) or pin (specific to the device, not like a password that works across all devices and authenticates to a source of truth). If configuring Windows Hello for Business for single sign-on (SSO), devices will need to be added to Azure AD and enrolled in Intune first.
- Threat protection:
- Microsoft Defender Advanced Threat Protection (ATP) reduces attack vulnerability and allows you to incorporate additional features alongside what you're already using from Microsoft Threat Protection (such as conditional access, Azure ATP, O365...
