MD-102 Protecting Endpoints with Security Policies 2

Question 1

Which Intune endpoint security policy configures Windows Firewall rules on managed devices?

Accepted Answer

Endpoint security – Firewall

Answer

Endpoint security – Antivirus

Answer

Device configuration – Endpoint protection

Answer

Device compliance – Windows

Question 2

An administrator wants to ensure that a device's TPM chip is enabled and functioning before allowing access to corporate resources. Which Intune policy type is used?

Accepted Answer

Device compliance policy

Answer

Device configuration profile

Answer

Endpoint security – Account protection

Answer

Endpoint security baseline

Question 3

Which feature in Microsoft Defender for Endpoint provides behavioral monitoring to detect and stop attacks in real time?

Accepted Answer

Endpoint detection and response (EDR)

Answer

Attack surface reduction rules

Answer

Cloud-delivered protection

Answer

Tamper protection

Question 4

A user is trying to access a phishing website. Which Microsoft Defender for Endpoint feature blocks access to the malicious URL?

Accepted Answer

Network protection

Answer

Attack surface reduction rules

Answer

Controlled folder access

Answer

Application Guard

Question 5

Which Intune policy can prevent users from modifying Microsoft Defender Antivirus settings on their Windows 10 devices?

Accepted Answer

Tamper protection setting in Antivirus policy

Answer

Endpoint security baseline

Answer

Device restriction configuration profile

Answer

App protection policy

Question 6

An administrator wants to block USB drives on corporate Windows 10 devices using Intune. Which policy type should be used?

Accepted Answer

Endpoint security – Attack surface reduction

Answer

Device configuration – Device restrictions

Answer

Endpoint security – Firewall

Answer

Device compliance policy