Microsoft Exam MD-102 Topic 1 Question 30 Discussion

Actual exam question for Microsoft's MD-102 exam

Question #: 30
Topic #: 1

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all Windows 11 devices.

You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile! to all the devices.

A user reports that an Adobe Reader plug-in is now blocked.

You need to ensure that the plug-in is unblocked.

What should you do?

ACreate an Endpoint Privilege Management policy and assign the policy to all the devices.

BAdd a scope tag to Profile1.

CConfigure ASR Only Per Rule Exclusions in Profile1.

DCreate a device compliance policy and assign the policy to all the devices.

Show Suggested Answer

Suggested Answer: C

by Vincent at Aug 02, 2024, 12:07 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Diane

18 days ago

I think creating an Endpoint Privilege Management policy could be the solution.

upvoted 0 times

...

Virgie

19 days ago

I believe configuring ASR Only Per Rule Exclusions in Profile1 could also work.

upvoted 0 times

...

Glennis

25 days ago

I agree with Kirby, adding a scope tag might help.

upvoted 0 times

...

Elbert

26 days ago

I've got a hunch it's C. Wouldn't want to accidentally block the one tool that the entire company relies on, right? Gotta keep those plug-ins happy and running.

upvoted 0 times

Moon

4 hours ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Maryann

15 days ago

B) Add a scope tag to Profile1.

upvoted 0 times

...

Kirby

26 days ago

I think we should add a scope tag to Profile1.

upvoted 0 times

...

Yoko

28 days ago

I think adding a scope tag to Profile1 (option B) could also help in unblocking the plug-in.

upvoted 0 times

...

Taryn

29 days ago

I'm not sure, maybe we should consider option A as well.

upvoted 0 times

...

Tomas

1 months ago

Ah, the joys of Intune management. I'd go with C as well. Gotta love those little exclusions that can save the day.

upvoted 0 times

My

2 days ago

C) I agree, exclusions can definitely come in handy in situations like this.

upvoted 0 times

...

Josue

6 days ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Chauncey

9 days ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Candida

2 months ago

Option C all the way! I can already picture the IT support team scrambling to figure this one out. Good thing we have these multiple-choice questions to keep them on their toes.

upvoted 0 times

Samira

28 days ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Fatima

29 days ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Stephania

2 months ago

I agree with Mollie, configuring ASR Only Per Rule Exclusions seems like the right choice.

upvoted 0 times

...

Mollie

2 months ago

I think we should go with option C.

upvoted 0 times

...

Alba

2 months ago

Hmm, I'd say go with option C. Seems like the most straightforward way to unblock that Adobe Reader plug-in without messing up the whole security profile.

upvoted 0 times

...