exam questions

Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 4 question 34 discussion

Actual exam question from Microsoft's MD-101
Question #: 34
Topic #: 4
[All MD-101 Questions]

You have an Azure Active Directory (Azure AD) tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.
You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

  • A. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
  • B. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
  • C. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.
  • D. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure Windows Defender Antivirus settings.
  • E. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
  • F. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.
Show Suggested Answer Hide Answer
Suggested Answer: EF 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
j0eyv
Highly Voted 4 years, 5 months ago
Defender AV is in Device Restrictions. Defender FW is in Endpoint Restrictions. E/F!
upvoted 30 times
FlailingLimbs
3 years, 10 months ago
Correct. Just tested and confirmed.
upvoted 9 times
RodrigoT
3 years ago
E. F. I tested in my tenant too. However I don't understand with Microsoft sees Antivirus under Device Restrictions. It doesn't make any sense. For me it should be also under Endpoint Protection.
upvoted 3 times
...
...
...
Lomak
Highly Voted 4 years, 8 months ago
it is NOT a Device Restriction profile. AV/Firewall both exist in the Endpoint Protection profile Answer : A, F
upvoted 16 times
Cliffh
4 years, 7 months ago
true: https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10
upvoted 1 times
Nail
4 years, 6 months ago
No, they are right, E and F. I'm looking at it right now in Intune. AV is in Device Restrictions, Firewall is in Endpoint Protection.
upvoted 11 times
...
M0nster
4 years, 5 months ago
This litterly states that AV is in device restrictions. So E and F
upvoted 9 times
...
...
Solaris2002
3 years, 1 month ago
I do have to admit it is very dumb that Endpoint Protection does NOT include Defender AV. Microsoft is weird like that. but the answer is E and F.
upvoted 2 times
...
...
Amir1909
Most Recent 1 year, 3 months ago
Correct
upvoted 1 times
...
henriquesolid
1 year, 9 months ago
AS dlast said: Outdated both are now under EndPoint Security https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security
upvoted 1 times
...
dlast
1 year, 11 months ago
Outdated both are now under EndPoint Security https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security
upvoted 3 times
...
AliNadheer
2 years, 2 months ago
now its in open endpoint manager admin center > endpoint security > under manage you can see both AV and firewall, clicking on either you'll be able to create a policy configuration profile
upvoted 1 times
...
devilcried
2 years, 4 months ago
Selected Answer: AF
Outdated answer . Now both are available to Endpoint Security
upvoted 2 times
drhousedk
2 years, 4 months ago
Agreed, both are moved to Endpoint Security now.
upvoted 1 times
...
...
junior6995
2 years, 7 months ago
Outdated question - as of now, September 2022, both options sit under Endpoint Security (Firewall and Anti-virus)
upvoted 5 times
...
raduM
2 years, 8 months ago
Selected Answer: EF
e and f are the correct answers. no antivirus under endpoint protection
upvoted 1 times
...
MitchF
2 years, 9 months ago
The first figure in the Microsoft document (below) shows they are both under Endpoint Protection. So the answer is correct (A & F are correct) Source: https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-security-policy
upvoted 1 times
...
Kumargvm
3 years, 2 months ago
Selected Answer: EF
Answer is E & F WD Firewall is in EndPoint Protection WD Antivirus is in Device Restriction
upvoted 1 times
...
Solaris2002
3 years, 2 months ago
I have my Intune tenant open right now as I type this. You COULD create Device Restrictions for Firewall and AV settings via Devices > Configuration Profiles > Create Profile >Device Restrictions But it would appear to me the PROPER way to do this is to navigate to Endpoint Security> and then select either Antivirus or Firewall and create the policies from there. To reiterate, AV IS IN Endpoint Security. I'd attach a screenshot if I could The answer should therefore be A and F
upvoted 1 times
Solaris2002
3 years, 2 months ago
From https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10 "To configure Microsoft Defender Antivirus, see Windows device restrictions or use endpoint security Antivirus policy."
upvoted 1 times
...
...
lucadp010
3 years, 3 months ago
Selected Answer: EF
E. F. You can test it with a lab!
upvoted 2 times
...
IykeP
3 years, 3 months ago
Selected Answer: EF
E and F is the correct answer, just tested in intune now.
upvoted 3 times
...
moobdoob
3 years, 3 months ago
Selected Answer: AF
Correct answer: A F
upvoted 1 times
...
Pleebb
3 years, 10 months ago
A & F "You can use Microsoft Endpoint Manager to configure Microsoft Defender Antivirus scans. Microsoft Intune and Configuration Manager are now part of Endpoint Manager." https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/use-intune-config-manager-microsoft-defender-antivirus?view=o365-worldwide
upvoted 1 times
...
RajeeMark
3 years, 10 months ago
You can do both AV and FW in Endpoint Protection. You need to create this with least effort. Therefore A and F since it is the quickest way.
upvoted 1 times
Mujja
3 years, 10 months ago
The is no Defender AV in Endpoint protection
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago