As the systems administrator for an international trading firm, your company uses Azure Active Directory (AD) to manage users and devices, enrolling these users and devices in Microsoft Intune as well. You want to create an Intune app protection policy for everyone with the Sales Representative title that meets the following company requirements: - Personal devices don't need to be enrolled in Intune. - Employees can user their personal iOS and Android devices to access company apps. - Employees must use the Intune Company Portal to download and install company apps. - Employees can only use Microsoft OneDrive for cloud storage of company data. Which of the following Azure Active Directory (AD) group types would you create to include all Sales Representatives in the app protection policy? Microsoft 365 group Distribution group Security group Global group
Upstudy AI Solution
Answer
Solution
Sign in to Unlock Answers for Free!
A Learning Platform Trusted by Millions of Real Students and Teachers.
Unlock Answered by UpStudy AI and reviewed by a Professional Tutor
The Deep Dive
To address your needs, you’ll want to create a **Security group** in Azure Active Directory (AD) for your Sales Representatives. This group type allows you to apply security policies, such as the Intune app protection policy you have in mind, effectively targeting users based on their role. The other group types, like Distribution groups, lack security capabilities, while Microsoft 365 groups are more focused on collaboration rather than strict policy application. Don’t forget, when setting up the policy, to configure it to allow access from unmanaged devices, supporting personal usage while ensuring company data remains secure, particularly in conjunction with OneDrive as the sole cloud storage solution. Balancing accessibility with compliance is key!
