Exam MD-102 topic 1 question 185 discussion

Actual exam question from Microsoft's MD-102

Question #: 185
Topic #: 1

You have a Microsoft 365 subscription that contains 500 computers that run Windows 11. The computers are Azure AD joined and are enrolled in Microsoft Intune.

You plan to manage Microsoft Defender Antivirus on the computers.

You need to prevent users from disabling Microsoft Defender Antivirus.

What should you do?

A. From the Microsoft Intune admin center, create a security baseline.
B. From the Microsoft 365 Defender portal, enable tamper protection.
C. From the Microsoft Intune admin center, create an account protection policy.
D. From the Microsoft Intune admin center, create an endpoint detection and response (EDR) policy.

Show Suggested Answer

Suggested Answer: B 🗳️

by BJS78 at Oct. 24, 2023, 7:46 a.m.

Comments

Submit Cancel

BJS78

Highly Voted 1 year, 1 month ago

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection?view=o365-worldwide

upvoted 5 times

...

MR_Eliot

Most Recent 9 months ago

Selected Answer: B

B is correct. This can also be enabled using Intune > Security Settings > Antivirus https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection?view=o365-worldwide#how-do-i-configure-or-manage-tamper-protection

upvoted 3 times

...

sergioandreslq

9 months ago

B: Microsoft 365 Defender portal--> settings-->endpoint-->advanced features--> tamper protection With tamper protection, malicious apps are prevented from turning off security features like virus & threat protection, behavior monitoring, cloud-delivered protection, and more.

upvoted 2 times

...