Discuss Microsoft SC-200 Exam Topic 10 Question 29

You have a Microsoft 365 subscription that contains 1,000 Windows 10 devices. The devices have Microsoft Office 365 installed.

You need to mitigate the following device threats:

Microsoft Excel macros that download scripts from untrusted websites

Users that open executable attachments in Microsoft Outlook

Outlook rules and forms exploits

What should you use?

AMicrosoft Defender Antivirus

Battack surface reduction rules in Microsoft Defender for Endpoint

CWindows Defender Firewall

Dadaptive application control in Azure Defender

Suggested Answer: B

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/overview-attack-surface-reduction?view=o365-worldwide

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Soledad 12 months ago

C is just a firewall, it won't cover all those threats!

James 1 year ago

Not sure if B is the best choice, what about C?

Tabetha 1 year ago

Wait, are we really considering D? Seems a bit overkill for this.

Rosendo 1 year ago

I think A could help too, but not as much as B.

Bong 1 year ago

Definitely B, those attack surface reduction rules are key!

Socorro 1 year ago

I feel like adaptive application control could be useful, but I don't recall it being specifically mentioned for these types of threats.

Mireya 1 year ago

I practiced a similar question where we had to choose between Defender for Endpoint and the Firewall. I think the reduction rules are more targeted for this scenario.

Valentine 1 year ago

I'm not entirely sure, but I think Microsoft Defender Antivirus might help with some of these issues too, right?

Kathrine 1 year ago

I remember we discussed attack surface reduction rules in class, and they seemed really effective against macro threats.

Cammy 1 year ago

Okay, let's see. The question mentions that the upload_max_filesize is set to 10M, so that shouldn't be the problem. I'll need to focus on the other options.

Keneth 1 year ago

Hmm, this is a tricky one. I'm not totally sure about the details of provider profiling, so I'll have to read the options closely and try to apply my general knowledge of healthcare practices. Gotta be careful not to overthink it.

Isabelle 1 year ago

Antimalware tools don't really focus on portscanning either, do they? It feels like they target different issues. I'm stuck between host-based firewall and HIDS.

Microsoft SC-200 Exam - Topic 10 Question 29 Discussion