Microsoft
This Microsoft application is commonly used for company chat, meetings, and internal calls.
What is Microsoft Teams?
This type of software allows IT to remotely manage company iPads. Name 2
What is Apple Business Manager and Kandji
IT should never create a system account until this has happened.
What is management/HR authorization or an approved access request?
Someone calls pretending to be an employee and asks IT to reset their password immediately. This is an example of what type of attack?
What is social engineering?
A user reports an issue but only says, “It’s not working.” What should IT ask for first?
What is the specific error or problem they are experiencing?
This Microsoft admin portal is where IT can assign or remove Microsoft 365 licenses from a user.
What is the Microsoft 365 Admin Center?
A company iPad is erased but during setup it never displays the company's Remote Management screen. What system should IT check?
A new employee can log into Equina but sees fewer options than their coworker with the same job. What should IT compare?
What are coworker roles and permissions?
An employee accidentally enters their Microsoft password into a suspicious website. What should IT do first?
Reset the password and revoke active sessions.
Before remotely connecting to a user’s computer, what should IT do?
Get the user’s permission and confirm the correct device/user.
A user knows their password but Microsoft keeps asking them to approve a sign-in on an old phone they no longer own. What needs to be updated and which program we use?
What are their MFA/authentication methods on Entra?
Apple Business Manager shows the device, but it is assigned to the wrong MDM server. What must IT do before expecting Kandji enrollment?
Reassign the device to the correct Kandji MDM server in Apple Business Manager.
A user says they do not know their TripLog password. How can IT get them back into their account?
TripLog does not use a traditional password for this login process. IT can resend the welcome/sign-in email, which allows the user to automatically sign in.
A user's account shows a successful login from California and another successful login from Europe ten minutes later. What should IT suspect?
What is an account compromise / impossible travel event?
A user reports that an application works for everyone else but not for them. Should IT immediately assume it is a company-wide outage?
No — troubleshoot the individual user/device first.
IT wipes a Windows computer, but during setup it asks for a BitLocker Recovery Key. Where can IT retrieve the recovery key for a company-managed device?
Microsoft InTune
A company iPad is showing in Kandji, but it has not checked in and is not receiving apps or commands. What should IT verify first?
What is whether the device is powered on and connected to the internet?
A user says TripLog is not tracking their mileage. What is one of the first settings IT should check?
Verify that Location Services / location tracking is enabled for TripLog on the user’s device.
A user calls IT requesting a password reset for their Microsoft account. After verifying the user’s identity, should IT verbally give the new password to them over the phone?
Only send the temporary password by text to the verified phone number on file.
A user requests access to software they have never had before. What should IT verify before granting access?
That the access is approved and required for their job.
A user’s Microsoft account is active, their password works, MFA succeeds, and they have the correct license—but Microsoft still blocks them from accessing an application because of a security policy. Where should IT look to find exactly what policy caused the sign-in to fail?
What are the Microsoft Entra Sign-in Logs
n iPad was factory reset, but during setup it never enrolls into Kandji or shows the company’s Remote Management screen. The device is company-owned. Where should IT use to enroll ?
Apple Configurator App
ripLog can track mileage using two different methods. What are they, and how do they work?
Someone unexpectedly calls an employee claiming to be from Google. There was no prior support request. The caller says they sent an email and tells the employee to click “Accept” so they can help resolve a ticket. What type of attack should IT suspect, and why?
A phishing/social-engineering attempt. The caller is trying to convince the employee to approve an unsolicited request or click a malicious link. The employee should not accept or click anything and should report the call to IT. Legitimate vendor support should originate from a support case the company initiated or another verified support channel.
A user calls saying their manager told them they need administrator access immediately. The manager has not submitted a ticket or approval. What should IT do?
Do not grant access until the request and authorization are verified through the approved process.