Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   In the Microsoft Defender Vulnerability Management dashboard, which section provides a summary of the most critical vulnerabilities that require attention?

   • AThreat analytics
   • BExposure score
   • CDevice inventory
   • DTop security recommendations
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   You are a security analyst. The vulnerability management dashboard shows that a specific device has a high risk score due to multiple critical vulnerabilities. However, the device is a kiosk in a public area that runs a single application. The kiosk is not managed by Intune and is only domain-joined. You need to reduce the device's risk score while minimizing the impact on the kiosk's functionality. What should you do?

   • ARemove the kiosk from the domain to reduce its attack surface.
   • BIgnore the kiosk's risk score because it is a public device.
   • CUse the security recommendations to identify which vulnerabilities are most relevant to the kiosk's application, and patch only those.
   • DApply all recommended patches immediately, even if they require a restart.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When reviewing vulnerabilities in Microsoft Defender Vulnerability Management, which factor is used to prioritize which vulnerabilities to remediate first?

   • AThe vulnerability severity and the likelihood of exploitation
   • BThe age of the vulnerability
   • CThe operating system of the affected device
   • DThe number of devices in the organization
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A security team wants to see which vulnerabilities are most likely to be exploited and have the highest impact on the organization. Which view in the vulnerability management dashboard should they use?

   • ASecurity recommendations view
   • BExposure score view
   • CThreat score view
   • DDevice inventory view
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   Contoso has 500 Windows 10 devices that are already managed by Microsoft Intune. The security team wants to onboard these devices to Microsoft Defender for Endpoint without requiring users to run scripts or interact with the devices. Which method should you use?

   • ADeploy an endpoint detection and response policy from Microsoft Intune to the devices.
   • BCreate a Group Policy object that runs the onboarding script at startup.
   • CUse the Microsoft Defender for Endpoint onboarding wizard to download a local script and run it manually on each device.
   • DUse Microsoft Configuration Manager to create a compliance policy that includes the onboarding script.
   Reveal Solution Discussion Select an answer first