Microsoft Exam MD-102 Topic 1 Question 30 Discussion

Actual exam question for Microsoft's MD-102 exam

Question #: 30
Topic #: 1

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all Windows 11 devices.

You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile! to all the devices.

A user reports that an Adobe Reader plug-in is now blocked.

You need to ensure that the plug-in is unblocked.

What should you do?

ACreate an Endpoint Privilege Management policy and assign the policy to all the devices.

BAdd a scope tag to Profile1.

CConfigure ASR Only Per Rule Exclusions in Profile1.

DCreate a device compliance policy and assign the policy to all the devices.

Show Suggested Answer

Suggested Answer: C

by Vincent at Aug 02, 2024, 12:07 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Diane

11 months ago

I think creating an Endpoint Privilege Management policy could be the solution.

upvoted 0 times

...

Virgie

11 months ago

I believe configuring ASR Only Per Rule Exclusions in Profile1 could also work.

upvoted 0 times

...

Glennis

11 months ago

I agree with Kirby, adding a scope tag might help.

upvoted 0 times

...

Elbert

11 months ago

I've got a hunch it's C. Wouldn't want to accidentally block the one tool that the entire company relies on, right? Gotta keep those plug-ins happy and running.

upvoted 0 times

Moon

11 months ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Maryann

11 months ago

B) Add a scope tag to Profile1.

upvoted 0 times

...

Kirby

11 months ago

I think we should add a scope tag to Profile1.

upvoted 0 times

...

Yoko

11 months ago

I think adding a scope tag to Profile1 (option B) could also help in unblocking the plug-in.

upvoted 0 times

...

Taryn

12 months ago

I'm not sure, maybe we should consider option A as well.

upvoted 0 times

...

Tomas

12 months ago

Ah, the joys of Intune management. I'd go with C as well. Gotta love those little exclusions that can save the day.

upvoted 0 times

My

11 months ago

C) I agree, exclusions can definitely come in handy in situations like this.

upvoted 0 times

...

Josue

11 months ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Chauncey

11 months ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Candida

1 years ago

Option C all the way! I can already picture the IT support team scrambling to figure this one out. Good thing we have these multiple-choice questions to keep them on their toes.

upvoted 0 times

Samira

11 months ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Fatima

12 months ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Stephania

1 years ago

I agree with Mollie, configuring ASR Only Per Rule Exclusions seems like the right choice.

upvoted 0 times

...

Mollie

1 years ago

I think we should go with option C.

upvoted 0 times

...

Alba

1 years ago

Hmm, I'd say go with option C. Seems like the most straightforward way to unblock that Adobe Reader plug-in without messing up the whole security profile.

upvoted 0 times

...