You are troubleshooting a Win 10 device for a user and decide to disable Secure Boot on the device. You think you have solved the issue and need to re-enable Secure Boot again. 
How would you do this, using the least amount of effort?

Answer options:

A.Open the BIOS menu and modify the settings.
B.Run sysprep.
C.Wipe the device from Intune.
D.Add the device to a security group.

Correct Answer: A 
You should open the device’s BIOS settings and locate Secure Boot under 
Settings charm > Change PC settings > Update and Recovery > Recovery > Advanced Startup: Restart now. When the PC reboots, go to Troubleshoot > Advanced Options: UEFI Firmware Settings. Option B is incorrect. This is used for preparing the image for imaging.
Option C is incorrect. This is used for remotely wiping Intune-managed devices.
Option D is incorrect. Adding the device to a security group will not enable Secure Boot.
Reference: 
To know more about disable/enable secure boot, please refer to the link below: 

https://docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/disabling-secure-boot