MD-101 Endpoint Security and Microsoft Defender for Endpoint 2

Question 1

What is Microsoft Defender for Endpoint's 'Controlled Folder Access' designed to protect against?

Accepted Answer

Ransomware and untrusted apps modifying protected folder contents

Answer

Controlled Folder Access protects designated folders (Documents, Desktop, etc.) from being modified by untrusted applications, blocking ransomware from encrypting user files.

Question 2

Which Intune security baseline type provides pre-configured security settings based on Microsoft security guidance for Windows 10/11?

Accepted Answer

Microsoft Security Baseline for Windows 10/11 in Endpoint security

Answer

Microsoft Security Baselines in Intune Endpoint security provide preconfigured, Microsoft-recommended security settings for Windows 10/11, covering hundreds of hardening configurations.

Question 3

What is 'Tamper Protection' in Microsoft Defender Antivirus, and why is it important?

Accepted Answer

A feature that prevents unauthorized changes to Defender Antivirus settings by malware or users

Answer

Tamper Protection prevents malware and unauthorized users from disabling or modifying Microsoft Defender Antivirus settings, ensuring security tools remain active.

Question 4

An organization onboards devices to Microsoft Defender for Endpoint. Which Intune policy type deploys the MDE onboarding configuration package?

Accepted Answer

Endpoint detection and response (EDR) policy under Endpoint security

Answer

The Endpoint detection and response policy in Intune Endpoint security deploys the MDE onboarding package that connects devices to the MDE service.

Question 5

What information does the Microsoft Defender for Endpoint 'Device Inventory' in the Microsoft 365 Defender portal provide?

Accepted Answer

A comprehensive list of onboarded devices with risk level, OS version, and last seen information

Answer

The Device Inventory in Microsoft 365 Defender shows all MDE-onboarded devices with risk levels, exposure scores, OS details, and last activity timestamps.

MD-101 - Managing Modern Desktops Practice Test

MD-101 - Managing Modern Desktops Practice Test

MD-101 Endpoint Security and Microsoft Defender for Endpoint 2