Exam MS-101 topic 2 question 15 discussion

Computer 1 will be a member of: Group 3 only If you add the tag demo to Computer1, the computer will be a member of: Group 1 only

Answer is 3 and 1 When a device is matched to more than one group, it is added only to the highest ranked group. You can also edit and delete groups. https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide

I'm going with Group3 and Group1

You can promote or demote the rank of a device group so that it's given higher or lower priority during matching. A device group with a rank of 1 is the highest ranked group. When a device is matched to more than one group, it's added only to the highest ranked group. You can also edit and delete groups. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups#:~:text=You%20can%20promote,and%20delete%20groups.

I disagree with the answer. I understand that when Microsoft Defender ATP applies the policy, it applies it to the group with the highest rank. Even to complement the name of Microsoft Defender ATP changed to Microsoft Defender for Endpoint https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide But if you look at the question, that's not it. "Computer1 will be a member of", that is, he wants to know from the computer's configuration which group it will be inserted into, in this case the device's dynamic group will be a member, so the answer would be "Group3 and Group4 only". At no point does it ask which policy it will apply for Microsoft Defender ATP. The same thing when he asks "If you add the tag demo to computer1, the computer will be a member of", that is, again he asks about group members and not what policy will apply in ATP, so the answer would be " Group1, Group2, Group3, and Group4" Final anwser 1 - Group3 and Group4 only 2 - Group1, Group2, Group3, and Group4

On exam on 13 aug'22

"If a device is also matched to other groups, it's added only to the highest ranked device group". https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide As a result of this, the answers are Group3 only and Group1 only.

Can somone please explain why Computer1 is not matched to Group1 based on the OS (Windows 10)

Group 3 and group 1. Someone needs to correct this answer please.

Admin, please correct the answer, the correct answer is Group 3 , Group 1

Group 3, Group 1. Only the highest ranked group will be added.

higher rank wins https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide To be checked if "WINDOWS 10" filter will cover machine os: "WINDOWS 10 x64" :)

Answer should be group 3 and group one. Highest ranked group gets priority.

Specify the matching rule that determines which device group belongs to the group based on the device name, domain, tags, and OS platform. If a device is also matched to other groups, it's added only to the highest ranked device group. https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/machine-groups?view=o365-worldwide Group 3 and group 1 per that article

Answer should be Group 3 , Group 1 Higher rank wins

You can only be a member of one group and the highest rank wins (Lowest number).