Exam MD-101 topic 4 question 21 discussion

Create a Windows 10 > Templates > Endpoint protection configuration policy in endpoint.microsoft.com. Under Microsoft Defender Exploit Guard, configure Controlled folder access.

Correct

App list = App control

To ensure that only a trusted list of applications is granted write access to the D:\Folder1 folder on Windows 10 computers managed by Microsoft Intune, you should configure option D: Microsoft Defender Application Control in the device configuration profile. Microsoft Defender Application Control (formerly known as Windows Defender Application Control or Device Guard) is a security feature that allows you to enforce strict control over the software that can be executed on a device. By using Microsoft Defender Application Control, you can create and enforce policies that allow only approved applications to run and have specific permissions on the device.

correct

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/enable-controlled-folders correct!

Notes from the supplied link: Encryption of files by ransomware and other unauthorized apps means losing control of your data: documents, precious photos and videos, and other important files. For enterprises and small businesses, losing access to files can mean disrupted operations. Controlled folder access protects files by locking down critical folders, allowing only authorized apps to access files. Unauthorized apps, including malicious and suspicious executable files, DLLs, scripts, and others will be denied access even when they are running with the user’s or administrator’s privilege, which malware is often be able to secure.

looks correct from reference. See: Controlled folder access