MD-101 Endpoint Security and Microsoft Defender for Endpoint

Question 1

Which Intune integration enables security administrators to manage Microsoft Defender for Endpoint settings directly from the Intune admin center?

Accepted Answer

Microsoft Defender for Endpoint — Intune connector via security settings management

Answer

Azure Security Center connector

Answer

Microsoft Sentinel integration

Answer

Azure AD Identity Protection

Question 2

What is the purpose of Microsoft Defender for Endpoint's 'Attack Surface Reduction (ASR)' rules?

Accepted Answer

To prevent specific behaviors commonly exploited by malware, such as Office macro spawning processes

Answer

To block all internet access from managed devices

Answer

To encrypt device storage before threats can access files

Answer

To scan email attachments in real time

Question 3

Which Intune endpoint security policy type configures Microsoft Defender Antivirus scan settings and exclusions?

Accepted Answer

Antivirus policy under Endpoint security

Answer

Endpoint detection and response (EDR) policy

Answer

Device restrictions profile

Answer

Security baseline

Question 4

What does Microsoft Defender for Endpoint's 'Endpoint Detection and Response (EDR)' capability primarily provide?

Accepted Answer

Post-breach detection, investigation, and response capabilities for advanced threats

Answer

Real-time antivirus scanning

Answer

Network firewall management

Answer

Email security and anti-phishing

Question 5

An administrator configures an ASR rule in 'Audit mode'. What is the effect on devices?

Accepted Answer

The rule logs what would have been blocked without actually preventing the action

Answer

The rule blocks the behavior and logs it

Answer

The rule is disabled and does nothing

Answer

The rule only applies to new processes, not existing ones

Question 6

Which Microsoft Defender for Endpoint feature provides network-level protection by blocking connections to malicious IPs and URLs?

Accepted Answer

Network Protection

Answer

Attack Surface Reduction rules

Answer

Controlled Folder Access

Answer

Exploit Protection