A security analyst needs to identify which devices in the organization have the highest number of critical vulnerabilities and also see the associated threat exposure score. Where should the analyst navigate in the Microsoft 365 Defender portal?

Microsoft Defender Vulnerability Management dashboard

During a vulnerability assessment, you find a vulnerability that is not actively exploited but has a high severity score. The affected device is a low-risk file server. What should you do first?

Isolate the device from the network.

Remediate immediately because the severity is high.

Schedule the remediation for the next maintenance window.

Ignore the vulnerability because it is not exploited.

In Microsoft Defender Vulnerability Management, what does the 'threat insights' column indicate for a vulnerability?

The date the vulnerability was first discovered

Whether the vulnerability is associated with active threats or exploits

The number of devices affected by the vulnerability

The recommended security update for the vulnerability

A vulnerability assessment reveals that a specific application has a known vulnerability with a vendor-provided patch. However, the patch requires a system restart, and the affected devices are in a production environment that cannot be restarted during business hours. What is the best way to handle this situation?

Apply the patch and restart the devices immediately, accepting the downtime.

Do not apply the patch and document the risk as accepted.

Schedule the patch installation and restart during the next maintenance window.

Apply the patch without restarting, assuming the patch takes effect immediately.

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 3

Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 2)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

30–35%of the exam

Questions 6–10

6application · medium
A security analyst needs to identify which devices in the organization have the highest number of critical vulnerabilities and also see the associated threat exposure score. Where should the analyst navigate in the Microsoft 365 Defender portal?
Select an answer first
7application · medium
During a vulnerability assessment, you find a vulnerability that is not actively exploited but has a high severity score. The affected device is a low-risk file server. What should you do first?
Select an answer first
8foundation · easy
In Microsoft Defender Vulnerability Management, what does the 'threat insights' column indicate for a vulnerability?
Select an answer first
9foundation · easy
In Microsoft Defender for Endpoint, which policy type is used to control the settings for antivirus and endpoint detection and response on devices?
Select an answer first
10application · medium
A vulnerability assessment reveals that a specific application has a known vulnerability with a vendor-provided patch. However, the patch requires a system restart, and the affected devices are in a production environment that cannot be restarted during business hours. What is the best way to handle this situation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.

Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 2)

Questions 6–10

A security analyst needs to identify which devices in the organization have the highest number of critical vulnerabilities and also see the associated threat exposure score. Where should the analyst navigate in the Microsoft 365 Defender portal?

During a vulnerability assessment, you find a vulnerability that is not actively exploited but has a high severity score. The affected device is a low-risk file server. What should you do first?

In Microsoft Defender Vulnerability Management, what does the 'threat insights' column indicate for a vulnerability?

In Microsoft Defender for Endpoint, which policy type is used to control the settings for antivirus and endpoint detection and response on devices?

Keep studying — Manage security and threats by using Microsoft Defender XDR