3Protect devices

• 3.1Endpoint security

  Understand antivirus/disk encryption (BitLocker)/firewall/Attack surface reduction policies, security baselines, Microsoft Defender for Endpoint integration (EDR), and App Control for Business.

• 3.2Manage device updates

  Understand update rings, feature updates vs quality updates, Windows Autopatch and Hotpatch, iOS/macOS updates via the Settings Catalog, Delivery Optimization, and update monitoring.