Which policies enforce rules based on device group membership?

• A. Firewalls
• B. Security Policies
• C. Enrollment Rules
• D. Group Rules

Answer: (B)

Security policies are the mechanism for applying rules to devices based on their group membership. In endpoint security, you define a policy that is scoped to a specific device group, so any device that belongs to that group inherits and enforces the rules within that policy. This allows you to tailor security controls—like allowed apps, encryption requirements, or data access rules—according to which group a device is in, ensuring consistent enforcement across all members of that group.

Firewalls control network traffic and may apply rules based on other attributes, but their primary purpose isn’t to enforce policies specifically tied to device groups. Enrollment rules determine how devices join the system, not the ongoing enforcement of group-based policies. Group rules suggest a concept of grouping, but the enforcement mechanism that actually applies the rules to devices based on their group membership is the security policy framework.