Exam MD-102 topic 1 question 263 discussion

Actual exam question from Microsoft's MD-102

Question #: 263
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 subscription.

You have 25 Microsoft Surface Hub devices that you plan to manage by using Microsoft Intune.

You need to configure the devices to meet the following requirements:

• Enable Windows Hello for Business.
• Configure Microsoft Defender SmartScreen to block users from running unverified files.

Which profile type template should you use for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by AdrianoM at March 6, 2024, 4:08 p.m.

Comments

Submit Cancel

deinth

Highly Voted 10 months, 2 weeks ago

Identity procation is now renamed to Account protection https://learn.microsoft.com/en-us/mem/intune/protect/identity-protection-configure

upvoted 5 times

Meek_Learner

4 months, 3 weeks ago

1. To enable Windows Hello for Business = Identity protection 2. To configure Microsoft Defender SmartScreen to block users from running unverified files = Device restrictions (Windows 10 Team). The Identity protection template allows you to configure Windows Hello for Business settings, including enabling the feature and setting up various authentication options. The Device restrictions (Windows 10 Team) template is specifically designed for Surface Hub devices and includes options to configure Microsoft Defender SmartScreen settings, such as preventing users from bypassing SmartScreen prompts for unverified files.

upvoted 1 times

...

5e80f0c

5 months, 4 weeks ago

Correct. SmartScreen has also been moved to Endpoint Security --> ASR (Attack Surface Reduction) --> Application Control.

upvoted 1 times

5e80f0c

5 months, 4 weeks ago

Nevermind my previous comment about SmartScreen. ASR has an option for enabling SmartScreen, but Device --> Configuration Profile --> Endpoint Protection has it too. My guess is that Microsoft eventually moves those features over to Endpoint Security 1 day. They did the same with Windows Hello for Business.

upvoted 1 times

...

Rezaee

Most Recent 10 months, 1 week ago

correct

upvoted 1 times

...

oopspruu

11 months ago

I am not sure how the first one is correct. The only place where I can found WHFB settings are in Intune > Endpoint Security > Account Protection > Account Protection Policy. There is no "identity protection" template for Windows 10 or higher in Configuration profiles.

upvoted 1 times