Exam MS-102 topic 1 question 186 discussion

I don`t understand how someone can agree with the given answer. Do your study before you post something. Integration with Microsoft Defender for Cloud is designed for Windows Servers and has nothing to do with BYOD. First answer = Intune Second answer = Local Script Remember this: Devices enrolled = Intune Devices not enrolled = Local Script

I disagree specifically with BYOD answer provided. The question is how do you extend Defender for Endpoint to these these BYOD devices. Since they are not enrolled, you have no control over them. Defender for Cloud Apps is a CASB. I don't see how people walking around with BYOD PC's would be accessing anything through a CASB service and it's not endpoint protection. I found this: https://techcommunity.microsoft.com/t5/microsoft-defender-for-endpoint/microsoft-defender-for-endpoint-for-byod-devices/m-p/2488318 A locally executed script is your only option here. VDI would work if these users were forced to use VDI's from their BYOD devices, but it's not as straight forward an answer to the question.

local script is limited to 10 devices..... I have onboarded 50 in a day with the same script, even if this was true you just have to download de script again.

First answer is Integration with Microsoft defender. computer are all ready intune manged it say Second one local script

absolutely second answer is local script

Answers are 1. Intune 2. Local Script

I would say: 1. Intune 2. Local Script

It seems both Intune https://learn.microsoft.com/en-us/mem/intune/fundamentals/deployment-guide-enrollment

For the ppl suggesting Intune for BYOD+Defender: It IS possible, BUT the devices needs to be managed by Intune, which is maybe you want to do or not (license costs, etc). All based on the company policy. Looking to the scenario described, the BYOD devices are NOT managed, so Intune for them is out of scope.

Surely the answer is Intune and Intune. Local Script is support for up to 10 devices. Group Policy is out. But if you are using Intune for MDM you are likely also using it for MAM on the BYOD. However you can't enforce a required app for BYOD only make it available so maybe the given answer is correct? Some of these questions are just confusing.

chatgpt question: You need to onboard DEVICE A and DEVICE B to Microsoft Defender for Endpoint. The solution must minimize administrative effort. DEVICE A Type: Corporate Operating system: Windows 11 Enrollment status: Azure AD-joined, Microsoft Intune-managed DEVICE B Type:Bring your own device (BYOD) Operating system: Windows 11 Enrollment status: Unmanaged What should you use to onboard each type of device? A local script Group Policy Integration with Microsoft Defender for Cloud Microsoft Intune Virtual Desktop Infrastructure (VDI) scripts Ther’s only one answer for DEVICE A and DEVICE B The answer of chatgpt: To onboard DEVICE A, which is a Corporate device running Windows 11 and is Azure AD-joined and Microsoft Intune-managed, you can use Microsoft Intune to onboard the device to Microsoft Defender for Endpoint 12. To onboard DEVICE B, which is a Bring your own device (BYOD) running Windows 11 and is unmanaged, you can use Integration with Microsoft Defender for Cloud to onboard the device to Microsoft Defender for Endpoint 13. Using Microsoft Intune for DEVICE A and Integration with Microsoft Defender for Cloud for DEVICE B will minimize administrative effort 1.

I'd go with 1. Intune 2. local script https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/deployment-strategy?view=o365-worldwide

According to the below link, You can also manually onboard individual devices to Defender for Endpoint by using a local script. I think that individual Device means BYOD. Therefore answers are: Local Script Microsoft Intune https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-endpoints-script?view=o365-worldwide

To me it is: Intune In both I use it in my environment I have policy to corporate devices and another policy to BYOD

I do Agree with aleksdj The First Answer should be Intune and the second Should be Intune

Correct https://techcommunity.microsoft.com/t5/microsoft-defender-vulnerability/unmanaged-device-protection-capabilities-are-now-generally/ba-p/2463796