Knowledge check

Conditional Access allows anonymous users to access organizational resources on trusted devices.

Conditional Access prevents trusted users from accessing trusted devices and trusted apps.

Conditional Access ensures that only trusted users can access organizational resources on trusted devices using trusted apps.

An assigned group is a group of users or devices that you manually add into a static group. A dynamic group is a group of users or devices that are automatically assigned based on an expression you create. In addition, dynamic groups requires Microsoft Entra ID P1 or P2.

An assigned group is a group of users or devices that automatically set. A dynamic group is a group of users that you manually set.

For policies, there are no differences when assigning based on assigned group or dynamic group.

Assign a policy to a device group when you want to have different policy settings for each user.

If you want to apply policy settings on a device, regardless of who's signed in, then assign your policies to a device group.

If you don't want to have any policy settings for the device, use a device group.

Yes. Using tenant attach in a co-managed endpoint management scenario, you can integrate Configuration Manager with Microsoft Defender ATP to gain access to security tasks that help enterprises detect, investigate, and respond to advanced attacks on their networks.

No. You can only integrate Microsoft Defender ATP with Intune.