A company has a mix of Windows 10 and Windows Server 2019 devices. They are using Microsoft Intune for device management. The security team wants to enable attack surface reduction rules and controlled folder access, but they are concerned that these settings might break a legacy line-of-business application. They also need to ensure that all devices are onboarded to Defender for Endpoint. What is the best approach?

Do not enable attack surface reduction rules or controlled folder access to avoid any risk to the legacy application.

Onboard all devices and immediately deploy the security policies in block mode to ensure maximum protection.

Onboard only the Windows 10 devices and skip the Windows Server devices to reduce risk.

Onboard all devices, then deploy the security policies in audit mode first, monitor for issues, and then switch to block mode.

The vulnerability management dashboard shows a critical vulnerability on a server that runs a legacy line-of-business application. The vendor has not yet released a patch. What should you do to mitigate the risk while waiting for the patch?

Uninstall the line-of-business application.

Disable the server until the patch is released.

Wait for the patch and do nothing else.

Apply a workaround or mitigation recommended in the vulnerability management dashboard.

A company wants to ensure that all endpoints have real-time protection enabled and that tamper protection is turned on to prevent users from disabling security features. They are using Microsoft Intune to manage devices. What should you configure?

A device compliance policy that requires real-time protection to be enabled.

A Windows security baseline that includes real-time protection settings.

An endpoint detection and response policy with tamper protection enabled.

A configuration profile that sets the registry key for real-time protection.

An organization uses Microsoft Intune to manage its Windows 10 devices. They want to enforce a consistent security baseline that includes Defender for Endpoint settings such as real-time protection and cloud-delivered protection. What should you use?

Manually configure each device's Windows Security app.

Deploy a Group Policy object from the domain controller.

Use a local script to apply the settings on each device.

Create a security baseline in Intune and assign it to the devices.

In Microsoft Defender Vulnerability Management, what is the purpose of creating a remediation request?

To block the vulnerability from being exploited

To notify the security team of a new vulnerability

To automatically apply the security update to all affected devices

To track and manage the remediation of a vulnerability across the organization

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 3

Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 4)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

30–35%of the exam

Questions 16–20

16expert · hard
A company has a mix of Windows 10 and Windows Server 2019 devices. They are using Microsoft Intune for device management. The security team wants to enable attack surface reduction rules and controlled folder access, but they are concerned that these settings might break a legacy line-of-business application. They also need to ensure that all devices are onboarded to Defender for Endpoint. What is the best approach?
Select an answer first
17application · medium
The vulnerability management dashboard shows a critical vulnerability on a server that runs a legacy line-of-business application. The vendor has not yet released a patch. What should you do to mitigate the risk while waiting for the patch?
Select an answer first
18application · medium
A company wants to ensure that all endpoints have real-time protection enabled and that tamper protection is turned on to prevent users from disabling security features. They are using Microsoft Intune to manage devices. What should you configure?
Select an answer first
19application · medium
An organization uses Microsoft Intune to manage its Windows 10 devices. They want to enforce a consistent security baseline that includes Defender for Endpoint settings such as real-time protection and cloud-delivered protection. What should you use?
Select an answer first
20foundation · easy
In Microsoft Defender Vulnerability Management, what is the purpose of creating a remediation request?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.