Exam MD-102 topic 1 question 20 discussion

The wording of the question is You need to ensure that you CAN apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. that suggests you need to make the devices ABLE to receive the policies, not push the policies themselves. Creating a configuration profile alone will not enable you to apply policies, Microsoft Defender for Endpoint needs to be installed and then you CAN apply policies.

C wont minimize admin effort Answer is D

Answer is C. To pass these test you have to be able to read through the noise. What is the objective? 'You need to ensure that you can APPLY Microsoft Defender for Endpoint antivirus POLICIES to the macOS devices'. You can't APPLY the policy until MDE is installed.

I think it is C, but using Intune (it doesn't say you need to manually install the app). Installing the app is needed for onboarding the devices to Defender for Endpoint.

C. Install Defender for Endpoint on the macOS devices.

To apply Microsoft Defender for Endpoint (MDE) antivirus policies to macOS devices, Defender for Endpoint must first be installed on the devices. Without the installation, the policies cannot be enforced. Once MDE is installed, you can then manage security settings through Microsoft Intune or security baselines.

D First section of deploying Defender for endpoint on a macOS is to "Create System configuration Profiles" https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune

I think I understand the confusion here. It is true Defender for Endpoint needs to be installed first, but, in order to do so, a configuration profile would be created/used to install Defender for Endpoint on all 500 devices, as doing it manually would not minimise efforts. This is a trick question

need to first install the app

https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune

You need to install Defender to apply Defender Policys on Mac. On Windows it's already installed.

Microsoft portals and tests says its C

To ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices enrolled in Microsoft Intune, you need to install Microsoft Defender for Endpoint on the macOS devices. This is a prerequisite for managing antivirus policies for macOS devices through Intune. After installation, the devices can be onboarded to Defender for Endpoint, which allows Intune to enforce antivirus configurations on these devices effectively. While configuration profiles are used to set specific policies, the Defender for Endpoint client must first be installed to enable these policies to function. This minimizes administrative effort as the installation process and onboarding streamline policy application across devices. Thus, the correct answer is: C. Install Defender for Endpoint on the macOS devices. https://learn.microsoft.com/en-us/mem/intune/apps/apps-advanced-threat-protection-macos

without defender for endpoint, you can't apply the policy. the policies are there, ms asks to ensure that you can apply them. For me, first of all, you have to install endpoint defender

For Intune to manage antivirus settings on a device, Microsoft Defender for Endpoint must be installed on that device. See. Microsoft Defender for Endpoint for macOS (In the Microsoft Defender for Endpoint documentation) https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-antivirus-policy

Answer is D as Microsoft themselves state: Create system configuration profiles The next step is to create system configuration profiles that Microsoft Defender for Endpoint needs. In the Microsoft Intune admin center, open Devices > Configuration profiles. Source: https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune

A configuration profile in Intune can be used to manage settings and enforce compliance policies across devices. While it can help deploy software or set configurations, it's not typically used for directly installing applications like Microsoft Defender for Endpoint. Instead, configuration profiles are generally used for settings such as VPN configurations, Wi-Fi profiles, or security settings. What Needs to Happen: To apply antivirus policies from Microsoft Defender for Endpoint to macOS devices, the Defender software itself must first be installed on the devices. Simply creating a configuration profile in Intune without ensuring that the Defender application is installed won't allow you to enforce these antivirus policies.