Exam MD-102 topic 1 question 276 discussion

Actual exam question from Microsoft's MD-102

Question #: 276
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage Windows 365 Cloud PC devices.

You need to deploy a Windows 365 Security Baseline to the Cloud PC devices. The solution must meet the following requirements:

• Block data execution prevention.
• Enable virtualization-based security (VBS) and Secure Boot.

What should you configure for the Windows 365 Security Baseline profile? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by chafe at July 13, 2024, 9:32 p.m.

Comments

Submit Cancel

chafe

Highly Voted 11 months, 1 week ago

Checked in tenant answers are correct: File explorer -> data execution prevention Device Guard -> VBS options are: Not configured, VBS with secureboot, VBS with secureboot and DMA

upvoted 8 times

...

Knight_Of_Peace

Most Recent 3 months, 2 weeks ago

Given answer is correct. File Explorer "Turn off Data Execution Prevention for Explorer Baseline default: Disabled" Ref: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1#:~:text=Turn%20off%20Data%20Execution%20Prevention%20for%20Explorer%0ABaseline%20default%3A%20Disabled Device Guard "Enable Virtualization Based Security Baseline default: Enable virtualization based security." Ref: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1#:~:text=Enable%20Virtualization%20Based%20Security%0ABaseline%20default%3A%20Enable%20virtualization%20based%20security.

upvoted 1 times

...

Meek_Learner

7 months, 1 week ago

In the context of Windows 365 Cloud PC devices, if you need to disable Data Execution Prevention (DEP), you should be looking at the "Microsoft Defender Antivirus" configuration within the Windows 365 Security Baseline profile. DEP is related to memory protection settings managed by Microsoft Defender Exploit Guard, which is part of the broader Microsoft Defender security suite. To enable virtualization-based security (VBS) and Secure Boot for Cloud PC devices using the Windows 365 Security Baseline profile, you need to focus on the configuration of System Guard (Device Guard) and System Security settings rather than only Microsoft Defender.

upvoted 1 times

Meek_Learner

7 months, 1 week ago

To block or disable Data Execution Prevention (DEP) in a Windows environment, the relevant setting would not typically be related to Microsoft Edge. Instead, it falls under system-level and security configurations, often managed by Windows Defender (or Microsoft Defender in modern terminology).

upvoted 1 times

...

BurtSmart

10 months ago

https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1 Answers are correct

upvoted 3 times

...