A.Application Control toggle under Device Settings

B.Threat Defense for AD

C.System Lockdown

D.Endpoint Activity Recorder

A.DNS poisoning countermeasures

B.Passive blocking of email phishing links

C.Policy-based enforcement of AD privilege limits

D.Real-time alerting of policy drift or privilege escalations

A.Whitelisting internal tools that show abnormal behavior

B.Automatically uninstalling legacy applications

C.Blocking applications that do not match expected behavior

D.Changing device group names based on alert severity

A.Limits endpoint visibility outside the LAN

B.Requires VPN to update policies

C.Blocks updates unless the device is on-premises

D.Enables real-time policy enforcement and threat remediation

A.It sends alerts when unauthorized or abnormal AD configuration changes occur.

B.It migrates all non-compliant AD accounts into a secure group container.

C.It automatically rewrites invalid Group Policy Objects.

D.It deploys DNS filtering scripts across all connected endpoints.