Exam MD-102 topic 1 question 276 discussion

Actual exam question from Microsoft's MD-102

Question #: 276
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage Windows 365 Cloud PC devices.

You need to deploy a Windows 365 Security Baseline to the Cloud PC devices. The solution must meet the following requirements:

• Block data execution prevention.
• Enable virtualization-based security (VBS) and Secure Boot.

What should you configure for the Windows 365 Security Baseline profile? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by chafe at July 13, 2024, 9:32 p.m.

Comments

Submit Cancel

chafe

Highly Voted 1 year ago

Checked in tenant answers are correct: File explorer -> data execution prevention Device Guard -> VBS options are: Not configured, VBS with secureboot, VBS with secureboot and DMA

upvoted 8 times

...

Besxp

Most Recent 1 month ago

To block data execution prevention: 👉 File Explorer Referenced Microsoft documentation: https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baseline-settings-windows-365?pivots=win365-24h1 Setting: “Turn off Data Execution Prevention for Explorer” Default: Disabled, meaning DEP is enabled (blocking execution of malicious code) To enable VBS: 👉 Device Guard Referenced Microsoft documentation: https://learn.microsoft.com/en-us/intune/intune-service/protect/security-baseline-settings-windows-365?pivots=win365-24h1 Setting: “Enable Virtualization Based Security” Found under: Device Guard Default: Enable virtualization based security

upvoted 1 times

...

Knight_Of_Peace

5 months ago

Given answer is correct. File Explorer "Turn off Data Execution Prevention for Explorer Baseline default: Disabled" Ref: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1#:~:text=Turn%20off%20Data%20Execution%20Prevention%20for%20Explorer%0ABaseline%20default%3A%20Disabled Device Guard "Enable Virtualization Based Security Baseline default: Enable virtualization based security." Ref: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1#:~:text=Enable%20Virtualization%20Based%20Security%0ABaseline%20default%3A%20Enable%20virtualization%20based%20security.

upvoted 1 times

...

Meek_Learner

8 months, 4 weeks ago

In the context of Windows 365 Cloud PC devices, if you need to disable Data Execution Prevention (DEP), you should be looking at the "Microsoft Defender Antivirus" configuration within the Windows 365 Security Baseline profile. DEP is related to memory protection settings managed by Microsoft Defender Exploit Guard, which is part of the broader Microsoft Defender security suite. To enable virtualization-based security (VBS) and Secure Boot for Cloud PC devices using the Windows 365 Security Baseline profile, you need to focus on the configuration of System Guard (Device Guard) and System Security settings rather than only Microsoft Defender.

upvoted 1 times

Meek_Learner

8 months, 4 weeks ago

To block or disable Data Execution Prevention (DEP) in a Windows environment, the relevant setting would not typically be related to Microsoft Edge. Instead, it falls under system-level and security configurations, often managed by Windows Defender (or Microsoft Defender in modern terminology).

upvoted 1 times

...

BurtSmart

11 months, 2 weeks ago

https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1 Answers are correct

upvoted 3 times

...