You are reviewing permissions on a device used for video calls and calculations. Which choice best applies the principle of granting apps only the access they need?
6 Accounts, Security, and Device Management Online Quiz Questions
Use this free practice quiz with 20 questions to review 6 Accounts, Security, and Device Management, test your knowledge, and prepare for your next test or exam.
True or false: Adding a work account to an app always means the entire device has been enrolled in organizational management.
- A
True
- B
False
Complete the comparison: A configuration policy ; a compliance policy .
What Android feature can help show which apps accessed certain permissions and when?
A shared Windows device is being set up for everyday work. Which account arrangement best limits unnecessary system-level access?
- A
Use an administrator account for everyone so no one encounters restrictions.
- B
Create only one account and share it among all device users.
- C
Use a standard account for routine work and limit administrator accounts to those who need them.
- D
Give every user an administrator account but ask them not to use its extra capabilities.
True or false: Once device encryption is enabled, a screen lock and backups are no longer needed.
- A
True
- B
False
After a device is enrolled in a management service, which actions may administrators be able to take, depending on the enrollment method, ownership, and platform? Select all that apply.
- A
Require a screen lock and encryption.
- B
Deploy Wi-Fi or VPN configurations.
- C
Guarantee that administrators can read all personal messages and photos.
- D
Install or manage work apps.
- E
Enforce update requirements or restrict access to organizational resources.
What Android feature can separate managed work apps and data from personal apps and data?
Before enabling encryption, verify that required recovery information is stored in the rather than only on the device it unlocks.
A colleague signs in to a work app on a personally owned tablet. What can you reasonably conclude about device management from this fact alone?
- A
The device is definitely enrolled because the work account appears in an app.
- B
The work account may connect the app to organizational services, but that alone does not establish that the entire device is enrolled.
- C
The account cannot access any organizational services unless the entire device is enrolled.
- D
The account must be removed because work accounts cannot be used in apps.
Before enrolling a personally owned device for work, which steps are prudent? Select all that apply.
- A
Read the organization’s notice or policy.
- B
Understand what data and settings are managed.
- C
Find out what the administrator can do and whether a remote action affects work data or the whole device.
- D
Assume remote actions can affect only work data without checking.
- E
Use profiles and enrollment instructions provided by a trusted organization.
A managed device fails a requirement in its compliance policy. Which response is consistent with how an organization may handle this?
- A
The device must always be erased immediately.
- B
No action can be taken unless the user gives the administrator a personal password.
- C
The organization may notify the user, block access to work services, or take another action defined by policy.
- D
The device automatically becomes compliant as soon as a requirement is missed.
A coworker says that a strong device PIN is enough to secure both a phone and the online accounts used on it. Explain why the device lock and account authentication serve different purposes, and name appropriate safeguards for each.
True or false: If a device supports fingerprint or face unlocking, it is safe to remove the strong passcode or password used as a fallback.
- A
True
- B
False
An employee uses a Windows laptop for email and document work but occasionally needs software installed. Which account setup best follows least privilege?
- A
Use an administrator account for every task so system changes are always available.
- B
Use a standard account for routine work and reserve administrator access for tasks that require it.
- C
Give each user the same administrator account to keep settings consistent.
- D
Disable all accounts except the administrator account.
A basic calculator app requests access to the device camera. What is the most appropriate response?
- A
Allow every permission so the app can work without interruption.
- B
Allow camera access because all apps may need it for updates.
- C
Deny camera access unless the app’s purpose requires it.
- D
Allow camera access only if the user has an administrator account.
A user wants to unlock a phone quickly with a fingerprint. Which setup best combines convenience with sound device security?
- A
Use biometrics for convenience while retaining a strong passcode or password as a fallback.
- B
Use biometrics and remove all passcodes so there is only one unlock method.
- C
Use the same short PIN as the password for important online accounts.
- D
Rely on the account password instead of setting a device lock.
A company requires encryption on employee laptops. Which security benefit does this requirement primarily provide?
- A
It guarantees that data can never be accessed if a device is already unlocked.
- B
It removes the need for a screen lock and account authentication.
- C
It ensures lost files can always be restored without a backup.
- D
It helps protect stored information if the device is lost, stolen, or its storage is removed.
What is the name of the encryption feature available on supported Windows devices? Enter the feature name.
A device is being encrypted, and the user needs to preserve a way to regain access if the usual credential is lost. What should be stored securely outside the device?