Microsoft Intune Certification Course

Plan and implement device services

• Plan and implement device management by using Microsoft Endpoint Manager
• Plan co-management between Endpoint Configuration Manager and Intune
• Plan and implement configuration profiles for Windows and MacOS clients
• Plan and implement configuration profiles for iOS and Android
• Review and respond to issues identified in Microsoft Endpoint Manager

1. Plan and implement device security and compliance by using Microsoft Endpoint Manager

• Plan and implement device compliance policies
• Plan and implement attack surface reduction policies
• Implement and manage security baselines
• Plan and configure conditional access policies for device compliance

1. Deploy and manage applications by using Microsoft Endpoint Manager

• Plan and implement application deployment
• Publish public and private applications by using Microsoft Endpoint Manager
• Plan and implement application protection policies
• Plan and implement application configuration policies
• Monitor and troubleshoot application deployment

1. Plan for Windows client deployment and management

• Choose Windows client deployment methods and tools based on requirements, including Windows Autopilot, USMT, Microsoft Deployment Toolkit, and Windows Deployment Services
• Plan and implement Windows subscription-based activation
• Plan for Windows updates
• Plan and implement additional Windows client security features

1. Plan and implement device enrollment

• Plan and implement device join or hybrid join to Azure AD
• Plan and implement device registration to Azure AD
• Plan and implement manual and automated device enrollment into Intune

1. Manage security reports and alerts by using the Microsoft 365 Defender portal

• Review and respond to the Microsoft 365 Secure Score
• Review and respond to security alerts in Microsoft 365 Defender
• Review and respond to issues identified in security and compliance reports in Microsoft 365 Defender

1. Plan, implement, and manage email and collaboration protection by using Microsoft Defender for Office 365

• Plan and implement policies and rules in Microsoft Defender for Office 365
• Review and respond to issues identified in Microsoft Defender for Office 365, including threats, investigations, and campaigns
• Unblock users

1. Plan, implement, and manage endpoint protection by using Microsoft Defender for Endpoint

• Plan Microsoft Defender for Endpoint
• Onboard devices to Microsoft Defender for Endpoint
• Configure Microsoft Defender for Endpoint settings
• Review and respond to endpoint vulnerabilities
• Review and respond to risks on devices
• Review and respond to exposure score

1. Plan, implement, and manage Microsoft Defender for Cloud Apps

• Configure the application connector for Office 365
• Plan and configure Microsoft Defender for Cloud Apps policies
• Review and respond to Microsoft Defender for Cloud Apps alerts
• Review and respond to the activity log
• Configure Cloud App Discovery
• Review and respond to issues identified in Cloud App Discovery

1. Plan and implement information governance

• Plan and implement retention labels and label policies
• Recover deleted data in Exchange Online and SharePoint Online
• Implement records management

1. Plan and implement information protection

• Plan and implement data classification
• Plan and implement sensitivity labels and policies
• Optimize label usage by using Content Explorer, Activity Explorer, and label reports

1. Plan and implement data loss prevention (DLP)

• Plan and implement DLP for workloads
• Plan and implement Microsoft 365 Endpoint DLP
• Review and respond to DLP alerts, events, and reports

1. Manage search and investigation

• Configure auditing in Azure AD, including diagnostic settings
• Plan and configure audit retention policies for Microsoft 365
• Retrieve and interpret audit logs for workloads
• Plan and configure eDiscovery and Advanced eDiscovery
• Specify a Content Search based on requirements