Exam MD-102 topic 1 question 21 discussion

for firewall E: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/create-windows-firewall-rules-in-intune for antiviurs D: https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus

B and C are the correct answers : B. Creating a device configuration profile and configuring the Device restrictions settings allows you to manage the Microsoft Defender Firewall settings on your Azure AD joined Windows 10 devices through Microsoft Intune. This profile can help you configure and manage firewall rules and settings without the need for traditional Group Policy. C. Creating a device configuration profile and configuring the Endpoint protection settings allows you to manage Microsoft Defender Antivirus settings on your Azure AD joined Windows 10 devices through Microsoft Intune. This profile enables you to configure antivirus settings, exclusions, scanning options, and more, all while minimizing administrative effort.

From: https://learn.microsoft.com/en-us/intune/intune-service/protect/endpoint-protection-configure With Intune, you can use device configuration profiles to manage common Endpoint protection security features on devices, including: Firewall BitLocker Allowing and blocking apps Microsoft Defender and encryption

Firewall and antivirus are both under endpoint security menu in intune

C and E are the correct answers MS recommandations are to managed into Endpoint protection section for advance security. it's the same situation like Bitlocker configuration.

Given answer is correct. Microsoft Defender Antivirus setup: Intune --> Devices --> Configuration --> Create new policy --> Windows 10 and later --> Template --> Device Restrictions --> Microsoft Defender Antivirus. Windows Firewall setup: Intune --> Devices --> Configuration --> Create new policy --> Windows 10 and later --> Template --> Endpoint protection --> Windows Firewall.

C and E are the correct answers and this is why: Endpoint Protection Settings: These are specifically used for configuring security features like Microsoft Defender Antivirus, Microsoft Defender Firewall, and other advanced security settings. Why the other options are not correct? Device Restrictions Settings: While they do include some basic security options, they are more focused on restricting device features and user behavior. They do not provide the detailed configuration for antivirus or firewall settings that Endpoint protection does.

Since the Windows 10 devices are Azure AD joined and managed by Microsoft Intune, the best approach to configure Microsoft Defender Antivirus and Microsoft Defender Firewall while minimizing administrative effort is using Intune Device Configuration Profiles. Microsoft Defender Antivirus Configuration: In Intune, Endpoint protection settings under Device configuration profiles allow you to manage Defender Antivirus policies. This setting enables real-time protection, cloud-delivered protection, automatic sample submission, exclusions, and Defender updates. This matches option C. Microsoft Defender Firewall Configuration: The Microsoft Defender Firewall settings are also configured within Endpoint protection settings in an Intune Device configuration profile. This allows for enforcing firewall rules, inbound/outbound protection, and controlling network traffic centrally via Intune. This matches option E.

checked on the portal. DE is true

The correct answers are: ✅ C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings. ✅ E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings. Explanation: Since the Windows 10 devices are Azure AD joined and managed by Microsoft Intune, the correct way to configure Microsoft Defender Antivirus and Microsoft Defender Firewall is through Intune policies, not Group Policy Objects (GPOs). C. Microsoft Defender Antivirus: In Microsoft Intune, you need to create a Device Configuration Profile using the Endpoint protection template to configure Microsoft Defender Antivirus settings. E. Microsoft Defender Firewall: Similarly, to configure Defender Firewall, you must use an Endpoint protection profile in Intune.

Answer is CE. Go into Intune. Devices>Windows>Configuration>Create>Windows 10 and later>Templates>Endpoint Protection The information button for Endpoint protection says: "With Intune, you can use device configuration profiles to manage common endpoint protection security features on Windows devices, including Firewall, BitLocker, Microsoft Defender and encryption." Also doublechecked with Copilot, answer is CE.

D and E are the correct answers.

Both in Endpoint security https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-policy

Explanation: Since the devices are Azure AD joined and managed by Microsoft Intune, the configurations for both Microsoft Defender Firewall and Microsoft Defender Antivirus should be done through Intune's Endpoint protection settings, as they provide the necessary controls for these security features. C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings: Intune's Endpoint protection settings include configurations for Microsoft Defender Antivirus, such as enabling real-time protection, configuring scan schedules, and setting exclusions. E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings: Microsoft Defender Firewall settings, such as enabling the firewall, configuring rules, and network security, are also part of the Endpoint protection settings in Intune.

CE is the Answer

The correct actions are: C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings. E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings. These two options minimize administrative effort by using Microsoft Intune to centrally manage both Microsoft Defender Antivirus and Microsoft Defender Firewall. The Endpoint protection settings in a device configuration profile allow you to configure both firewall and antivirus settings for Intune-managed devices, streamlining the process and avoiding the need for Group Policy Objects (GPOs).

Yes, FOR AV - Device Restriction and AV For FW - Endpoint Protection - FW