Exam MS-102 topic 1 question 187 discussion

Actual exam question from Microsoft's MS-102

Question #: 187
Topic #: 1

You have a Microsoft 365 E5 subscription.

You onboard all devices to Microsoft Defender for Endpoint.

You need to use Defender for Endpoint to block access to a malicious website at www.contoso.com.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct answer is worth one point.

A. Create a web content filtering policy.
B. Enable Custom network indicators.
C. Enable automated investigation.
D. Create an indicator.
E. Configure an enforcement scope.

Show Suggested Answer

Suggested Answer: BD 🗳️

by ExamCheater1993 at Sept. 21, 2023, 5:18 p.m.

Comments

Submit Cancel

ExamCheater1993

Highly Voted 1 year, 11 months ago

Selected Answer: BD

This is wrong. You should first enable Enable Custom Network indicators and then creatte an indicator. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide#create-an-indicator-for-ips-urls-or-domains-from-the-settings-page

upvoted 16 times

...

Frank9020

Most Recent 9 months, 1 week ago

Selected Answer: BD

B&D is correct

upvoted 3 times

...

Thomasname

1 year, 5 months ago

Selected Answer: AD

first create a web content filter policy (A) and then make an indicator (C) for the website (url) you want to filter: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide#create-an-indicator-for-ips-urls-or-domains-from-the-settings-page

upvoted 2 times

...