TechKnowSurge
CompTIA Security+ 4.1 CompTIA Security+ 4.5 CompTIA Security+ 2.5
TechKnowSurge Catalog Interactives MDM or Group Policy?
InteractiveSecurityFree

MDM or Group Policy?

Choose the tool that enforces each configuration setting: MDM or Group Policy. Land five in a row.

⚑ Complete this interactive to capture a CTF flag worth 5 points.

About this interactive

Installing a program does not make it secure. Programs have many configuration options; some are set insecurely out of the box and must be locked down, while others are set so tight that they need loosening. Either way, the organization needs to enforce the configuration it chose rather than trust each user to keep it. The lesson names two tools. Mobile device management (MDM) is software or a service that configures and controls mobile devices: passcodes, encryption, which apps can be installed, remote lock and wipe. Group Policy configures Windows machines that belong to the domain, and it can also push settings to other software installed on them, sometimes with a vendor's add-on templates. The lesson pairs each tool with its own devices: MDM with phones and tablets, Group Policy with Windows machines in an Active Directory domain, organized into OUs and configured with templates such as ADMX files. The device, and how it is managed, decides the tool.

What you'll learn

Aligned to

CompTIA Security+
4.1 Given a scenario, apply common security techniques to computing resources.
4.5 Given a scenario, modify enterprise capabilities to enhance security.
2.5 Explain the purpose of mitigation techniques used to secure the enterprise.

Key terms

Mobile Device Management
MDM
Mobile Device Management is a software solution that enables organizations to remotely enroll, configure, monitor, and enforce security policies on employee mobile devices, including the ability to wipe lost or compromised devices.
Group Policy
A Windows feature that allows administrators to centrally define and enforce security configurations — such as password complexity rules, screen lock timeouts, and software restrictions — across all machines in an Active Directory domain.
Endpoint
Any device that connects to a network, including computers, smartphones, tablets, and IoT devices.

Topics

Interactive Streak Sort

About TechKnowSurge

TechKnowSurge builds IT and cybersecurity professionals through hands-on, concept-first training built around real understanding — not memorization. Free interactive tools, structured programs, and 25+ years of real-world experience, all in one place.

Explore free tools and programs →