Covers managing and securing laptops, desktops and mobile devices: UEM and MDM, zero-touch enrolment, compliance policies tied to Conditional Access, BYOD with app protection, and endpoint hardening. Also covers disk encryption, application control, EDR and XDR telemetry and response, and tools such as Intune, Jamf, CrowdStrike Falcon and Microsoft Defender for Endpoint.