MENU
You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Azure AD joined and are enrolled in Microsoft Intune.
You plan to manage Microsoft Defender Antivirus on the computers.
You need to prevent users from disabling Microsoft Defender Antivirus,
What should you do?
Suggested Answer: A
Get Premium MD-102 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
34 comments · newest first
TW
Twila
11 months ago
D sounds like overkill for just preventing tampering.
RI
Richelle
11 months ago
C is not the right choice here, just saying.
LE
Lenna
11 months ago
Wait, can users really disable Defender? That’s surprising!
IV
Ivory
12 months ago
I think A could work too, but B seems more direct.
GE
Georgene
1 year ago
Option B is the way to go! Tamper protection is key.
SC
Scot
1 year ago
I don't think EDR policies are meant for this purpose. I remember they focus more on threat detection rather than user settings.
HI
Hillary
1 year ago
I feel like account protection policies were mentioned in our study materials, but I can't recall if they specifically relate to Defender Antivirus.
MA
Markus
1 year ago
I'm not entirely sure, but I remember something about security baselines in Intune. Could that help prevent users from disabling Defender?
LE
Leah
1 year ago
I think enabling tamper protection from the Microsoft 365 Defender portal might be the right choice. It sounds familiar from the practice questions we did.
SK
Skye
1 year ago
Okay, let's think this through. We have 500 Windows 11 computers that are Azure AD joined and enrolled in Intune. To prevent users from disabling Defender, I think option B, enabling tamper protection from the M365 Defender portal, is the way to go. That should lock down Defender and stop users from tampering with it.
AD
Adria
1 year ago
Hmm, I'm a bit unsure about this one. I know we need to prevent users from disabling Defender, but I'm not sure if creating a security baseline or an account protection policy would be the best approach. I might need to review the details of each option more carefully.
CH
Cherri
1 year ago
This looks like a pretty straightforward question. I think the key is to prevent users from disabling Microsoft Defender Antivirus, so I'd go with option B and enable tamper protection from the Microsoft 365 Defender portal.
LY
Lynna
1 year ago
This seems straightforward enough. Since the computers are Azure AD joined and enrolled in Intune, I'd go with option A and create a security baseline in the Intune admin center. That should give me the control I need to manage Defender and prevent users from disabling it.
YE
Yesenia
1 year ago
Hmm, I'm a bit unsure about this one. I know exit status 0 indicates success, but I'm not totally sure what that means in the context of a process. I'll have to think this through carefully.
EU
Eun
1 year ago
Tamper protection all the way, baby! It's like putting Defender Antivirus in a steel cage, nothing's getting in or out without your say-so.
XO
Xochitl
1 year ago
B is the way to go, no doubt about it. Can't have users disabling our beloved Defender Antivirus, that would be like cutting off our own security limbs!
CO
Colby
1 year ago
B is definitely the best option to prevent users from disabling Microsoft Defender Antivirus.
BR
Brittani
1 year ago
A) From the Microsoft Intune admin center, create a security baseline.
LA
Latia
1 year ago
B) From the Microsoft 365 Defender portal, enable tamper protection.
FE
Felicidad
2 years ago
I'm not sure why anyone would go for C or D. Those options seem like they'd be more for managing user accounts or advanced threat detection, not just locking down Defender Antivirus.
VI
Vivan
1 year ago
I'm not sure why anyone would go for C or D. Those options seem like they'd be more for managing user accounts or advanced threat detection, not just locking down Defender Antivirus.
JA
Janey
1 year ago
B) From the Microsoft 365 Defender portal, enable tamper protection.
ED
Edgar
1 year ago
A) From the Microsoft Intune admin center, create a security baseline.
JO
Johnna
2 years ago
I'm going with B as well. Disabling Defender would be a big no-no, and tamper protection is the best way to keep those pesky users from turning it off.
ST
Stephen
1 year ago
Definitely, tamper protection is essential for maintaining the security of the computers.
AD
Adaline
1 year ago
I think enabling tamper protection is the way to go to ensure Defender stays on.
CL
Claribel
1 year ago
Agreed, tamper protection is a must to prevent users from disabling Defender.
TA
Tamra
1 year ago
I'm going with B as well. Disabling Defender would be a big no-no, and tamper protection is the best way to keep those pesky users from turning it off.
KA
Karon
2 years ago
Hmm, B seems like the obvious choice here. Tamper protection is designed to prevent users from messing with Defender Antivirus, so that's the way to go.
LU
Luann
1 year ago
B) From the Microsoft 365 Defender portal, enable tamper protection.
AR
Arthur
2 years ago
A) From the Microsoft Intune admin center, create a security baseline.
MA
Mabel
2 years ago
I'm not sure, but creating a security baseline from the Microsoft Intune admin center could also be a good option to consider.
SH
Sherita
2 years ago
I agree with Delila, tamper protection will prevent users from disabling Microsoft Defender Antivirus.
DE
Delila
2 years ago
I think we should go with option B, enabling tamper protection from the Microsoft 365 Defender portal.