MENU
You have a Microsoft 365 E5 subscription.
You use Microsoft Intune to manage all Windows 11 devices.
You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile! to all the devices.
A user reports that an Adobe Reader plug-in is now blocked.
You need to ensure that the plug-in is unblocked.
What should you do?
Suggested Answer: C
Get Premium MD-102 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
40 comments · newest first
AN
Antonio
11 months ago
Just adding a scope tag won't help here.
VE
Velda
11 months ago
Not sure if unblocking is that simple.
PU
Pura
11 months ago
Wait, why is Adobe Reader being blocked in the first place?
VI
Viva
12 months ago
Definitely go with option C! Makes sense.
ER
Ernest
12 months ago
You can configure ASR exclusions for specific apps.
EU
Eulah
1 year ago
Adding a scope tag doesn't sound right for unblocking a plug-in. I feel like the exclusions option is the most relevant here, but I need to double-check my notes.
DE
Devon
1 year ago
I don't think creating a compliance policy would help in this case. It seems more related to the ASR settings we discussed in class.
SO
Socorro
1 year ago
I think we practiced a similar question where we had to unblock an application. I feel like the answer might involve exclusions, but I can't recall the exact details.
LA
Latricia
1 year ago
I remember something about ASR rules and exclusions, but I'm not sure if I should configure them in Profile1 or if there's another step needed.
DO
Dominque
1 year ago
Alright, I've got a plan. I'll review the ASR policy settings and look for the option to add per-rule exclusions for the Adobe Reader plug-in. That should do the trick without having to create any additional policies.
DA
Darrel
1 year ago
I've dealt with similar issues before. I think the best approach is to configure the ASR policy to exclude the specific Adobe Reader plug-in, rather than creating a new policy or changing the device compliance.
JU
Junita
1 year ago
I'm a bit confused about the different policy options here. I'll need to make sure I understand the differences between Endpoint Privilege Management, ASR exclusions, and device compliance policies.
CA
Carmela
1 year ago
Okay, let's think this through step-by-step. The key is to find the right way to unblock the Adobe Reader plug-in without compromising the security of the ASR policy.
NA
Nana
1 year ago
Hmm, this seems like a tricky one. I'll need to carefully review the details about the ASR policy and how to manage exceptions.
MA
Major
1 year ago
Hmm, I'm a bit confused by the terminology here. I'll need to review my notes on planogram metrics and where they are defined.
LI
Lillian
1 year ago
Hmm, I'm a bit unsure about this one. I know test-driven development is important, but I can't remember the exact details. I'll have to think this through carefully.
DI
Diane
2 years ago
I think creating an Endpoint Privilege Management policy could be the solution.
VI
Virgie
2 years ago
I believe configuring ASR Only Per Rule Exclusions in Profile1 could also work.
GL
Glennis
2 years ago
I agree with Kirby, adding a scope tag might help.
EL
Elbert
2 years ago
I've got a hunch it's C. Wouldn't want to accidentally block the one tool that the entire company relies on, right? Gotta keep those plug-ins happy and running.
MO
Moon
2 years ago
C) Configure ASR Only Per Rule Exclusions in Profile1.
MA
Maryann
2 years ago
B) Add a scope tag to Profile1.
KI
Kirby
2 years ago
I think we should add a scope tag to Profile1.
YO
Yoko
2 years ago
I think adding a scope tag to Profile1 (option B) could also help in unblocking the plug-in.
TA
Taryn
2 years ago
I'm not sure, maybe we should consider option A as well.
TO
Tomas
2 years ago
Ah, the joys of Intune management. I'd go with C as well. Gotta love those little exclusions that can save the day.
MY
My
2 years ago
C) I agree, exclusions can definitely come in handy in situations like this.
JO
Josue
2 years ago
A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.
CH
Chauncey
2 years ago
C) Configure ASR Only Per Rule Exclusions in Profile1.
CA
Candida
2 years ago
Option C all the way! I can already picture the IT support team scrambling to figure this one out. Good thing we have these multiple-choice questions to keep them on their toes.
SA
Samira
2 years ago
A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.
FA
Fatima
2 years ago
C) Configure ASR Only Per Rule Exclusions in Profile1.
ST
Stephania
2 years ago
I agree with Mollie, configuring ASR Only Per Rule Exclusions seems like the right choice.
MO
Mollie
2 years ago
I think we should go with option C.
AL
Alba
2 years ago
Hmm, I'd say go with option C. Seems like the most straightforward way to unblock that Adobe Reader plug-in without messing up the whole security profile.
GA
Gary
2 years ago
Aha, a tricky one! I bet the answer is to configure the ASR exclusions. Can't have those pesky plug-ins blocked, can we?
NI
Nieves
2 years ago
User Comment: Aha, a tricky one! I bet the answer is to configure the ASR exclusions. Can't have those pesky plug-ins blocked, can we?
AV
Avery
2 years ago
A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.
GA
Galen
2 years ago
C) Configure ASR Only Per Rule Exclusions in Profile1.
LA
Latrice
2 years ago
B) Add a scope tag to Profile1.