Exam MS-102 topic 1 question 21 discussion

Actual exam question from Microsoft's MS-102

Question #: 21
Topic #: 1

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.
When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

You need to enable user access to the partner company's portal.
Which Microsoft Defender for Endpoint setting should you modify?

A. Alert notifications
B. Alert suppression
C. Custom detections
D. Advanced hunting
E. Indicators

Show Suggested Answer

Suggested Answer: E 🗳️

by RAG at Aug. 11, 2023, 10:10 a.m.

Comments

Submit Cancel

Dtriminio

Highly Voted 1 year, 4 months ago

Selected Answer: E

By creating indicators for IPs and URLs or domains, you can now allow or block IPs, URLs, or domains based on your own threat intelligence. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide

upvoted 16 times

fabiomartinsnet

3 months, 1 week ago

This question was in exam in March 17 2025

upvoted 4 times

...

RAG

Highly Voted 1 year, 4 months ago

Selected Answer: E

Same question as listed on https://www.examtopics.com/discussions/microsoft/view/48796-exam-ms-101-topic-2-question-32-discussion/

upvoted 6 times

...

fabiomartinsnet

Most Recent 3 months, 1 week ago

Selected Answer: E

This question was in exam today March17 2025.

upvoted 3 times

...

mikl

7 months, 2 weeks ago

Selected Answer: E

Copilot says Incidcators. To enable user access to the partner company’s portal and resolve the issue of the website being blocked, you should modify the Indicators setting in Microsoft Defender for Endpoint. Indicators are used to define URLs, IPs, and files that you’ve determined to be safe or malicious. By adjusting the indicators, you can allow access to a URL that was previously blocked1.

upvoted 2 times

...

letters1234

1 year, 3 months ago

Selected Answer: E

Answer lines up with image as well, Defender SmartScreen. "To block malicious IPs/URLs (as determined by Microsoft), Defender for Endpoint can use: - Windows Defender SmartScreen for Microsoft browsers - Network Protection for non-Microsoft browsers, or calls made outside of a browser" https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide#overview

upvoted 4 times

...