Exam MD-101 All Questions

View all questions & answers for the MD-101 exam

Exam MD-101 topic 4 question 20 discussion

Actual exam question from Microsoft's MD-101

Question #: 20
Topic #: 4

You have a computer named Computer1 that runs Windows 10.
Computer1 is used by a user named User1.
You need to ensure that when User1 opens websites from untrusted locations by using Microsoft Edge, Microsoft Edge runs in an isolated container.
What should you do first?

A. From Windows Features, turn on Microsoft Defender Application Guard.
B. From Windows Features, turn on Hyper-V Platform.
C. From Windows Security, configure the Virus & threat protection settings.
D. From Windows Security, configure the Device security settings.

Show Suggested Answer

Suggested Answer: A 🗳️
For Microsoft Edge, Application Guard helps to isolate enterprise-defined untrusted sites, protecting your company while your employees browse the Internet. As an enterprise administrator, you define what is among trusted web sites, cloud resources, and internal networks. Everything not on your list is considered untrusted. If an employee goes to an untrusted site through either Microsoft Edge or Internet Explorer, Microsoft Edge opens the site in an isolated Hyper-V- enabled container.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/wd-app-guard-overview https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-guard/install-wd-app-guard

by Jammer at Oct. 31, 2020, 1:16 p.m.

Comments

Submit Cancel

Jammer

Highly Voted 4 years, 6 months ago

https://www.windowscentral.com/how-enable-application-guard-microsoft-edge-windows-10-april-2018-update Here is a working link

upvoted 7 times

...

Solaris2002

Most Recent 3 years, 1 month ago

I'm really confused, isn't Hyper-V required for Application Guard to function? Would it not make sense to make sure Hyper-V is enabled first?

upvoted 4 times

51007

2 years, 11 months ago

Jammer's link, comments at bottom of page say your hardware must support Hyper-V but the feature needn't be enabled

upvoted 2 times

...

RodrigoT

3 years ago

You read my mind. But, I would "first" try to enable Application Guard. If it wouldn't work "then" I would check if the Hyper-V features are installed.

upvoted 3 times

...

silver_bullet666

2 years, 9 months ago

Hardware virtualization is required to enable Application Guard, Hyper-V windows component is not; https://social.technet.microsoft.com/Forums/en-US/518aea48-fbd8-4cff-a3e9-344788a4a5b9/windows-defender-application-guard-does-hyper-v-needs-to-be-enabled-on-every-machine-in-enterprise

upvoted 1 times

...

Perycles

3 years, 10 months ago

correct : for informations : Microsoft Defender Application Guard can be installed directly from computer (ADD/ remove Program or with powershell command) and with Intune (profile configuration > templates > Endpoint Protection > Microsfoft Defender Application Guard > Application Guard = enabled for Edge)

upvoted 3 times

...

grakara

3 years, 11 months ago

Answer given is correct.