Security should be a priority for IT administrators. Windows 10 Enterprise's new security features, such as Microsoft Defender Advanced Threat Protection (MDATP), Windows Information Protection (WIP), and Windows Hello for Business (WHFB) are all technologies that can help secure an organization's data and mitigate risk. MDATP is a threat protection offering as part of Windows 10 Enterprise.

MDATP is built into Windows 10 Enterprise and uses embedded sensors to detect anomalous behavior. MDATP is a platform of technologies that protect computers, or endpoints, from cyber threats such as data breaches and makes additional security recommendations. MDATP can offer automated investigations and remediation suggestions to help IT admins reduce manual efforts and respond more quickly to emerging threats.

WIP uses security mechanisms to provide information protection services to curtail potentially sensitive or otherwise essential company data from leaving the environment.

Finally, WHFB helps with identity and access management by providing a two-factor authentication method for logging into devices. WHFB is able to leverage biometric data with unique device PINs to help secure devices and reduce some of the risks associated with credential phishing attacks.

While the exam won't focus much on configuring advanced security measures, it's a good idea to become familiar with the terminology and feature set.

Since Windows 10 Enterprise leverages other technology from the Microsoft 365 suite, such as Intune, Office 365, and Azure Information Protection, it's important to understand how they all work together to provide a complete solution. These separate technologies not only appear in the MS-900 exam, they are imperative to your understanding of Microsoft 365. 

In this section, we've discussed Windows 10 Enterprise and its management, productivity, and security features as part of the core Microsoft 365 technology. Next, we'll discuss Office 365 ProPlus.