Exam MS-102 topic 1 question 294 discussion

Actual exam question from Microsoft's MS-102

Question #: 294
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You have devices onboarded to Microsoft Defender for Endpoint as shown in the following table.

You create the device groups shown in the following table.

IP address indicators are defined as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Gim99 at July 24, 2024, 8:50 a.m.

Comments

Submit Cancel

Gim99

Highly Voted 11 months, 4 weeks ago

Defender for Endpoint blocks access to IP address 20.30.40.50 from Device1. Device1 is in Group1 because its name starts with "Dev". Group1 has a block action for IP 20.30.40.50. Answer: Yes Defender for Endpoint blocks access to IP address 2.23.10.15 from Computer2. Computer2 is in Group2 because it is running Windows 11. Group2 does not have a block action for IP 2.23.10.15. Answer: No Defender for Endpoint blocks access to IP address 131.107.10.50 from Device3. Device3 is not in Group1 (name does not start with "Dev") and not in Group2 (OS is Android), so it falls under Ungrouped devices. Ungrouped devices have no specific rule blocking 131.107.10.50. Answer: No

upvoted 15 times

Khanbaba43

11 months ago

But for Device3, the name does start with "dev"??So they will be included in group 1. My answer would be Y, N, Y

upvoted 1 times

Khanbaba43

10 months, 4 weeks ago

Sorry I misread. Answer is YNN Group 1 not in scope for 131.107.10.50 to block. Only applies block for devices in group 2.

upvoted 3 times

BigO76

6 months, 2 weeks ago

your correct.... it is still YNN.. as Device3 matches Group1 because its name starts with "Dev." The policy for Group1 does not block access to IP 131.107.10.50; this IP is blocked only for Group2.

upvoted 2 times

...