Exam MS-102 topic 1 question 77 discussion

Actual exam question from Microsoft's MS-102

Question #: 77
Topic #: 1

HOTSPOT -
You have a Microsoft 365 E5 subscription.
All company-owned Windows 11 devices are onboarded to Microsoft Defender for Endpoint.
You need to configure Defender for Endpoint to meet the following requirements:
Block a vulnerable app until the app is updated.
Block an application executable based on a file hash.
The solution must minimize administrative effort.
What should you configure for each requirement? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by spectre786 at Sept. 11, 2023, 8:54 a.m.

Comments

Submit Cancel

spectre786

Highly Voted 1 year, 10 months ago

First : Remediation Request https://learn.microsoft.com/en-us/microsoft-365/security/defender-vulnerability-management/tvm-block-vuln-apps?view=o365-worldwide Second : File Indicator https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-file?view=o365-worldwide

upvoted 18 times

...

EubertT

Most Recent 3 months, 1 week ago

Based on the described requirements and the available options shown in the image: 1. Block a vulnerable app until the app is updated: Configure the An update ring option. This ensures that vulnerable applications are restricted until updates are applied, aligning with the goal of minimizing administrative effort. 2. Block an application executable based on a file hash: Use the A file indicator option. This allows precise targeting of specific file hashes to block executables effectively ___________________________________________________________

upvoted 2 times

...

Murad01

1 year ago

Given answer is correct

upvoted 3 times

...

Amir1909

1 year, 5 months ago

Correct

upvoted 1 times

...