Microsoft Exam MD-102 Topic 1 Question 30 Discussion

Actual exam question for Microsoft's MD-102 exam

Question #: 30
Topic #: 1

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all Windows 11 devices.

You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile! to all the devices.

A user reports that an Adobe Reader plug-in is now blocked.

You need to ensure that the plug-in is unblocked.

What should you do?

ACreate an Endpoint Privilege Management policy and assign the policy to all the devices.

BAdd a scope tag to Profile1.

CConfigure ASR Only Per Rule Exclusions in Profile1.

DCreate a device compliance policy and assign the policy to all the devices.

Show Suggested Answer

Suggested Answer: C

by Vincent at Aug 02, 2024, 01:07 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nana

3 days ago

Hmm, this seems like a tricky one. I'll need to carefully review the details about the ASR policy and how to manage exceptions.

upvoted 0 times

...

Major

8 days ago

Hmm, I'm a bit confused by the terminology here. I'll need to review my notes on planogram metrics and where they are defined.

upvoted 0 times

...

Lillian

12 days ago

Hmm, I'm a bit unsure about this one. I know test-driven development is important, but I can't remember the exact details. I'll have to think this through carefully.

upvoted 0 times

...

Diane

1 years ago

I think creating an Endpoint Privilege Management policy could be the solution.

upvoted 0 times

...

Virgie

1 years ago

I believe configuring ASR Only Per Rule Exclusions in Profile1 could also work.

upvoted 0 times

...

Glennis

1 years ago

I agree with Kirby, adding a scope tag might help.

upvoted 0 times

...

Elbert

1 years ago

I've got a hunch it's C. Wouldn't want to accidentally block the one tool that the entire company relies on, right? Gotta keep those plug-ins happy and running.

upvoted 0 times

Moon

1 years ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Maryann

1 years ago

B) Add a scope tag to Profile1.

upvoted 0 times

...

Kirby

1 years ago

I think we should add a scope tag to Profile1.

upvoted 0 times

...

Yoko

1 years ago

I think adding a scope tag to Profile1 (option B) could also help in unblocking the plug-in.

upvoted 0 times

...

Taryn

1 years ago

I'm not sure, maybe we should consider option A as well.

upvoted 0 times

...

Tomas

1 years ago

Ah, the joys of Intune management. I'd go with C as well. Gotta love those little exclusions that can save the day.

upvoted 0 times

My

1 years ago

C) I agree, exclusions can definitely come in handy in situations like this.

upvoted 0 times

...

Josue

1 years ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Chauncey

1 years ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Candida

1 years ago

Option C all the way! I can already picture the IT support team scrambling to figure this one out. Good thing we have these multiple-choice questions to keep them on their toes.

upvoted 0 times

Samira

1 years ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Fatima

1 years ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Stephania

1 years ago

I agree with Mollie, configuring ASR Only Per Rule Exclusions seems like the right choice.

upvoted 0 times

...

Mollie

1 years ago

I think we should go with option C.

upvoted 0 times

...

Alba

1 years ago

Hmm, I'd say go with option C. Seems like the most straightforward way to unblock that Adobe Reader plug-in without messing up the whole security profile.

upvoted 0 times

...