A vulnerability assessment reveals several vulnerabilities across the environment. The security team wants to prioritize remediation based on severity, exploitability, and the importance of the affected devices. Which approach should they use?

Remediate all vulnerabilities in the order they were discovered.

Prioritize vulnerabilities on devices that are easiest to patch.

Focus only on vulnerabilities with a CVSS score of 9.0 or higher.

Use the vulnerability management dashboard to sort by threat score and prioritize vulnerabilities affecting critical devices.

As the security administrator, you need to identify which devices in your organization have the highest number of critical vulnerabilities and also have active threats. Where should you look in the Microsoft Defender Vulnerability Management dashboard?

The Device inventory page, sorted by risk score.

The Exposure score page, which shows the overall exposure of the organization.

The Threat analytics dashboard, which lists active threats.

The Security recommendations page, filtered by 'Critical' severity.

An organization uses Microsoft Endpoint Manager to manage devices. They want to configure Defender for Endpoint policies that include attack surface reduction rules and network protection. What should you use?

Microsoft 365 Defender portal's security recommendations

Endpoint security policies in Microsoft Endpoint Manager

A company has a mix of Windows 10 and Windows Server 2019 devices that are not managed by Intune or Configuration Manager. The security team wants to onboard them to Defender for Endpoint quickly using a method that does not require installing additional agents. What should you do?

Manually add each device to the portal by IP address.

Download the onboarding package from the Microsoft 365 Defender portal and run the local script on each device.

Use Microsoft Endpoint Configuration Manager to onboard the devices.

Use Group Policy to deploy the onboarding package.

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 3

Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 5)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

30–35%of the exam

Questions 21–25

21application · medium
A vulnerability assessment reveals several vulnerabilities across the environment. The security team wants to prioritize remediation based on severity, exploitability, and the importance of the affected devices. Which approach should they use?
Select an answer first
22foundation · easy
Which metric on the Microsoft Defender Vulnerability Management dashboard indicates the overall level of exposure of the organization to security risks?
Select an answer first
23application · medium
As the security administrator, you need to identify which devices in your organization have the highest number of critical vulnerabilities and also have active threats. Where should you look in the Microsoft Defender Vulnerability Management dashboard?
Select an answer first
24application · medium
An organization uses Microsoft Endpoint Manager to manage devices. They want to configure Defender for Endpoint policies that include attack surface reduction rules and network protection. What should you use?
Select an answer first
25application · medium
A company has a mix of Windows 10 and Windows Server 2019 devices that are not managed by Intune or Configuration Manager. The security team wants to onboard them to Defender for Endpoint quickly using a method that does not require installing additional agents. What should you do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.