Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company has a mix of Windows 10 and Windows Server 2019 devices. They need to ensure that all devices receive consistent security settings from Defender for Endpoint, including attack surface reduction rules and controlled folder access. The devices are not enrolled in any management tool. What should you do first?

   • ACreate a security baseline in Microsoft Intune and assign it to all devices.
   • BOnboard all devices using the local script, then configure security settings individually on each device.
   • CUse Group Policy to apply security settings without onboarding the devices.
   • DOnboard the devices to Defender for Endpoint, then use Microsoft Endpoint Manager to create and assign security policies.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has 500 Windows 10 devices that are already enrolled in Microsoft Intune. The security team wants to onboard these devices to Microsoft Defender for Endpoint without using local scripts or Group Policy. They also want to ensure that the Defender for Endpoint security settings are applied consistently across all devices. What should you do?

   • ACreate a device configuration profile in Intune that includes the Defender for Endpoint onboarding settings and assign it to the devices.
   • BRun the onboarding script locally on each device from the Microsoft 365 Defender portal.
   • CUse the Microsoft 365 Defender portal to manually enter each device's IP address for onboarding.
   • DConfigure a Group Policy object to deploy the onboarding package and security settings.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   A company plans to onboard 50 Windows 10 devices to Microsoft Defender for Endpoint. The devices are already managed by Microsoft Endpoint Manager. Which method is most appropriate for onboarding these devices?

   • ARun a local onboarding script on each device manually
   • BDeploy an onboarding configuration profile through Microsoft Endpoint Manager
   • CManually add each device to the Microsoft 365 Defender portal without any script
   • DUse Group Policy to distribute the offboarding script
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   Your organization has identified a vulnerability in a widely used browser. The vendor has released a patch, but the patch is known to cause compatibility issues with a legacy web application used by the sales team. What should you do to manage this vulnerability effectively?

   • ADo not deploy the patch and instead rely on the browser's built-in security features.
   • BDeploy the patch to all devices immediately to eliminate the vulnerability.
   • CTest the patch in a pilot group that includes the legacy web application, then deploy to the rest of the organization if no issues occur.
   • DUninstall the legacy web application to avoid compatibility issues.
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   Your organization has a critical vulnerability in a third-party application. The vendor has released a patch, but the patch is known to conflict with your organization's security software. You need to remediate the vulnerability without compromising endpoint security. What should you do?

   • ATest the patch in a lab environment that mirrors your security software configuration, and then deploy if no conflicts are found.
   • BDo not deploy the patch and instead rely on the security software to protect against the vulnerability.
   • CUninstall the security software, deploy the patch, and then reinstall the security software.
   • DDeploy the patch and then reinstall the security software if conflicts occur.
   Reveal Solution Discussion Select an answer first