MD-102 Protecting Endpoints with Security Policies

Question 1

Which Microsoft Intune policy type is used to configure Microsoft Defender Antivirus settings on Windows 10 endpoints?

Accepted Answer

Endpoint security – Antivirus policy

Answer

Endpoint security Antivirus policies in Intune are specifically designed to configure Microsoft Defender Antivirus settings on managed Windows endpoints.

Question 2

An administrator wants to enable BitLocker encryption on all managed Windows 10 devices. Which Intune policy type should be used?

Accepted Answer

Endpoint security – Disk encryption policy

Answer

Endpoint security Disk encryption policies in Intune configure BitLocker settings and enforce drive encryption on Windows 10/11 managed devices.

Question 3

Which Intune feature integrates with Microsoft Defender for Endpoint to allow Intune compliance policies to use device risk scores?

Accepted Answer

Mobile Threat Defense connector

Answer

The Mobile Threat Defense (MTD) connector in Intune integrates with Defender for Endpoint to feed device risk scores into compliance policy evaluation.

Question 4

An organization wants to use a pre-configured set of security settings recommended by Microsoft for Windows 10. What should the admin deploy?

Accepted Answer

Windows 10 security baseline

Answer

Windows 10 security baselines in Intune provide Microsoft-recommended security configuration settings that can be deployed to managed devices with minimal customization.

Question 5

Which Windows security feature prevents untrusted applications from running on a device by allowing only signed and trusted software?

Accepted Answer

Windows Defender Application Control (WDAC)

Answer

Windows Defender Application Control (WDAC) enforces code integrity policies that allow only trusted and signed applications to execute on Windows devices.

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 - Endpoint Administrator Exam Practice Test

MD-102 Protecting Endpoints with Security Policies