Which of the following is a supported method for onboarding a Windows Server device to Microsoft Defender for Endpoint?

Installing the Microsoft 365 Apps for enterprise suite

Using a local script downloaded from the Microsoft 365 Defender portal

Creating a DNS record in the organization's domain

Enabling Windows Defender Firewall on the server

Your organization has a vulnerability in a third-party application that is installed on 80% of your Windows devices. The vulnerability has a CVSS score of 9.8, but there is no known exploit in the wild. You also have a separate vulnerability in a line-of-business application with a CVSS score of 7.5 that is actively being exploited. Which vulnerability should you prioritize for remediation?

The line-of-business application vulnerability because it is actively exploited, even though the CVSS score is lower.

The third-party application vulnerability because it has a higher CVSS score and affects more devices.

Neither vulnerability until a patch is available from the vendor.

Both vulnerabilities equally because they both need to be fixed eventually.

Your organization has 200 Windows 10 devices that are domain-joined and managed by Group Policy. You need to onboard them to Microsoft Defender for Endpoint. You have downloaded the onboarding package from the Microsoft Defender portal. What is the most efficient way to deploy the onboarding script to all devices?

Run the script manually on each device using an elevated PowerShell prompt.

Use Microsoft Intune to deploy the onboarding script as a PowerShell script.

Use Group Policy to assign a startup script that runs the onboarding script.

Email the script to users and ask them to run it.

A security administrator needs to generate a report that lists all devices with exposed vulnerabilities, including the number of vulnerabilities per device and the device's risk level. Which feature in the Microsoft 365 Defender portal should they use?

Vulnerability management dashboard

When a vulnerability is identified in Microsoft Defender Vulnerability Management, what is the typical first step in the response process?

Reboot the affected device immediately

Disable the affected device from the network

Apply the recommended security update

Microsoft 365 Certified:Administrator Expert

Domain 3Objective 3

Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 6)

Part of the Manage security and threats by using Microsoft Defender XDR domain, which accounts for 30–35% of the MS-102 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~12–23 in this domain), expect 3–6 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

5concepts

30–35%of the exam

Questions 26–30

26foundation · easy
Which of the following is a supported method for onboarding a Windows Server device to Microsoft Defender for Endpoint?
Select an answer first
27application · medium
Your organization has a vulnerability in a third-party application that is installed on 80% of your Windows devices. The vulnerability has a CVSS score of 9.8, but there is no known exploit in the wild. You also have a separate vulnerability in a line-of-business application with a CVSS score of 7.5 that is actively being exploited. Which vulnerability should you prioritize for remediation?
Select an answer first
28application · medium
Your organization has 200 Windows 10 devices that are domain-joined and managed by Group Policy. You need to onboard them to Microsoft Defender for Endpoint. You have downloaded the onboarding package from the Microsoft Defender portal. What is the most efficient way to deploy the onboarding script to all devices?
Select an answer first
29application · medium
A security administrator needs to generate a report that lists all devices with exposed vulnerabilities, including the number of vulnerabilities per device and the device's risk level. Which feature in the Microsoft 365 Defender portal should they use?
Select an answer first
30foundation · easy
When a vulnerability is identified in Microsoft Defender Vulnerability Management, what is the typical first step in the response process?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to MS-102

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “MS-102” is a trademark of its owner, used for identification only.

Implement and Manage Endpoint Protection by Using Microsoft Defender for Endpoint MS-102 Practice Questions (Page 6)

Questions 26–30

Which of the following is a supported method for onboarding a Windows Server device to Microsoft Defender for Endpoint?

A security administrator needs to generate a report that lists all devices with exposed vulnerabilities, including the number of vulnerabilities per device and the device's risk level. Which feature in the Microsoft 365 Defender portal should they use?

When a vulnerability is identified in Microsoft Defender Vulnerability Management, what is the typical first step in the response process?

Keep studying — Manage security and threats by using Microsoft Defender XDR