Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft MD-102 Exam - Topic 3 Question 28 Discussion

You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Azure AD joined and are enrolled in Microsoft Intune.You plan to manage Microsoft Defender Antivirus on the computers.You need to prevent users from disabling Microsoft Defender Antivirus,What should you do?
A) From the Microsoft Intune admin center, create a security baseline.
B) From the Microsoft 365 Defender portal, enable tamper protection.
C) From the Microsoft Intune admin center, create an account protection policy.
D) From the Microsoft Intune admin center, create an endpoint detection and response (EDR) policy.

Microsoft MD-102 Exam - Topic 3 Question 28 Discussion

Actual exam question for Microsoft's MD-102 exam
Question #: 28
Topic #: 3
[All MD-102 Questions]

You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Azure AD joined and are enrolled in Microsoft Intune.

You plan to manage Microsoft Defender Antivirus on the computers.

You need to prevent users from disabling Microsoft Defender Antivirus,

What should you do?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Hyman at Jul 07, 2024, 09:22 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Twila
7 months ago
D sounds like overkill for just preventing tampering.
upvoted 0 times
...
Richelle
7 months ago
C is not the right choice here, just saying.
upvoted 0 times
...
Lenna
8 months ago
Wait, can users really disable Defender? That’s surprising!
upvoted 0 times
...
Ivory
8 months ago
I think A could work too, but B seems more direct.
upvoted 0 times
...
Georgene
8 months ago
Option B is the way to go! Tamper protection is key.
upvoted 0 times
...
Scot
8 months ago
I don't think EDR policies are meant for this purpose. I remember they focus more on threat detection rather than user settings.
upvoted 0 times
...
Hillary
9 months ago
I feel like account protection policies were mentioned in our study materials, but I can't recall if they specifically relate to Defender Antivirus.
upvoted 0 times
...
Markus
9 months ago
I'm not entirely sure, but I remember something about security baselines in Intune. Could that help prevent users from disabling Defender?
upvoted 0 times
...
Leah
9 months ago
I think enabling tamper protection from the Microsoft 365 Defender portal might be the right choice. It sounds familiar from the practice questions we did.
upvoted 0 times
...
Skye
9 months ago
Okay, let's think this through. We have 500 Windows 11 computers that are Azure AD joined and enrolled in Intune. To prevent users from disabling Defender, I think option B, enabling tamper protection from the M365 Defender portal, is the way to go. That should lock down Defender and stop users from tampering with it.
upvoted 0 times
...
Adria
9 months ago
Hmm, I'm a bit unsure about this one. I know we need to prevent users from disabling Defender, but I'm not sure if creating a security baseline or an account protection policy would be the best approach. I might need to review the details of each option more carefully.
upvoted 0 times
...
Cherri
9 months ago
This looks like a pretty straightforward question. I think the key is to prevent users from disabling Microsoft Defender Antivirus, so I'd go with option B and enable tamper protection from the Microsoft 365 Defender portal.
upvoted 0 times
...
Lynna
9 months ago
This seems straightforward enough. Since the computers are Azure AD joined and enrolled in Intune, I'd go with option A and create a security baseline in the Intune admin center. That should give me the control I need to manage Defender and prevent users from disabling it.
upvoted 0 times
...
Yesenia
9 months ago
Hmm, I'm a bit unsure about this one. I know exit status 0 indicates success, but I'm not totally sure what that means in the context of a process. I'll have to think this through carefully.
upvoted 0 times
...
Eun
1 year ago
Tamper protection all the way, baby! It's like putting Defender Antivirus in a steel cage, nothing's getting in or out without your say-so.
upvoted 0 times
...
Xochitl
1 year ago
B is the way to go, no doubt about it. Can't have users disabling our beloved Defender Antivirus, that would be like cutting off our own security limbs!
upvoted 0 times
Colby
1 year ago
B is definitely the best option to prevent users from disabling Microsoft Defender Antivirus.
upvoted 0 times
...
Brittani
1 year ago
A) From the Microsoft Intune admin center, create a security baseline.
upvoted 0 times
...
Latia
1 year ago
B) From the Microsoft 365 Defender portal, enable tamper protection.
upvoted 0 times
...
...
Felicidad
1 year ago
I'm not sure why anyone would go for C or D. Those options seem like they'd be more for managing user accounts or advanced threat detection, not just locking down Defender Antivirus.
upvoted 0 times
Vivan
1 year ago
I'm not sure why anyone would go for C or D. Those options seem like they'd be more for managing user accounts or advanced threat detection, not just locking down Defender Antivirus.
upvoted 0 times
...
Janey
1 year ago
B) From the Microsoft 365 Defender portal, enable tamper protection.
upvoted 0 times
...
Edgar
1 year ago
A) From the Microsoft Intune admin center, create a security baseline.
upvoted 0 times
...
...
Johnna
1 year ago
I'm going with B as well. Disabling Defender would be a big no-no, and tamper protection is the best way to keep those pesky users from turning it off.
upvoted 0 times
Stephen
1 year ago
Definitely, tamper protection is essential for maintaining the security of the computers.
upvoted 0 times
...
Adaline
1 year ago
I think enabling tamper protection is the way to go to ensure Defender stays on.
upvoted 0 times
...
Claribel
1 year ago
Agreed, tamper protection is a must to prevent users from disabling Defender.
upvoted 0 times
...
Tamra
1 year ago
I'm going with B as well. Disabling Defender would be a big no-no, and tamper protection is the best way to keep those pesky users from turning it off.
upvoted 0 times
...
...
Karon
1 year ago
Hmm, B seems like the obvious choice here. Tamper protection is designed to prevent users from messing with Defender Antivirus, so that's the way to go.
upvoted 0 times
Luann
1 year ago
B) From the Microsoft 365 Defender portal, enable tamper protection.
upvoted 0 times
...
Arthur
1 year ago
A) From the Microsoft Intune admin center, create a security baseline.
upvoted 0 times
...
...
Mabel
1 year ago
I'm not sure, but creating a security baseline from the Microsoft Intune admin center could also be a good option to consider.
upvoted 0 times
...
Sherita
1 year ago
I agree with Delila, tamper protection will prevent users from disabling Microsoft Defender Antivirus.
upvoted 0 times
...
Delila
1 year ago
I think we should go with option B, enabling tamper protection from the Microsoft 365 Defender portal.
upvoted 0 times
...

Save Cancel