exam questions

Exam AZ-801 All Questions

View all questions & answers for the AZ-801 exam

Exam AZ-801 topic 1 question 18 discussion

Actual exam question from Microsoft's AZ-801
Question #: 18
Topic #: 1
[All AZ-801 Questions]

You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?

  • A. From a command prompt, run WinRM quickconfig.
  • B. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
  • C. From Event Viewer, enable the Debug log.
  • D. From the Windows Security app, configure the Virus & threat protection settings.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
xxxxx85xx
Highly Voted 3 years, 1 month ago
Correct Answer "Microsoft Defender SmartScreen events appear in the Microsoft-Windows-SmartScreen/Debug log, in the Event Viewer. Windows event log for SmartScreen is disabled by default, users can use Event Viewer UI to enable the log or use the command line to enable it: wevtutil sl Microsoft-Windows-SmartScreen/Debug /e:true"
upvoted 15 times
...
syu31svc
Highly Voted 2 years, 1 month ago
Selected Answer: C
Open the Event Viewer by typing "eventvwr.msc" in the Run dialog box or the Start menu search box and press Enter. In the left-hand pane, right-click "Custom Views" and select "Create Custom View". In the "Create Custom View" dialog box, select "By log" and choose "Microsoft-Windows-SmartScreen/Debug" from the drop-down list. Click "OK" to create the custom view. You can now view SmartScreen events by expanding the custom view in the left-hand pane of the Event Viewer. C is correct
upvoted 5 times
...
BlackCat9588
Most Recent 4 months, 1 week ago
Selected Answer: C
Tested C. From Event Viewer, enable the Debug log.
upvoted 2 times
...
SeattleJoe
8 months, 2 weeks ago
Selected Answer: C
Do not assume anything with Microsoft. They didn't mention a domain. C is the right answer.
upvoted 1 times
Friscini
5 months, 4 weeks ago
It says "local Group Policy" not "Domain group policy".
upvoted 1 times
...
...
starseed
9 months ago
correct answer is B---->To capture SmartScreen actions in the logs, you'll need to enable auditing. In the Group Policy Editor.
upvoted 1 times
...
RickySmith
1 year, 4 months ago
Selected Answer: C
C https://yongrhee.wordpress.com/2020/09/01/deploying-windows-defender-smartscreen-via-mem-intune-endpoint-microsoft-com-best-practices/
upvoted 1 times
...
FormaPlom
1 year, 7 months ago
Selected Answer: B
If this option it has all users and all computers, I think that the correct answer is B because the administration for this si more easier
upvoted 1 times
...
JacR
1 year, 9 months ago
Selected Answer: B
I think it's B as per https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/available-settings Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen "when enabling this feature, you must also pick whether Microsoft Defender SmartScreen should Warn your employees or Warn and prevent bypassing the message"
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...