Exam MD-101 topic 4 question 59 discussion

DRAG DROP -
You have 500 Windows 10 devices enrolled in Microsoft Intune.
You plan to use Exploit protection in Microsoft Endpoint Manager to enable the following system settings on the devices:
✑ Data Execution Prevention (DEP)
✑ Force randomization for images (Mandatory ASLR)
You need to configure a Windows 10 device that will be used to create a template file.
Which protection areas on the device should you configure in the Windows Security app before you create the template file? To answer, drag the appropriate protection areas to the correct settings. Each protection area may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Select and Place:

Suggested Answer:
Box 1: App & browser control -

Note: Data Execution Prevention (DEP): This mitigation prevents code from being run from data-only memory pages.

Box 2: App & browser control -
Force randomization for images (Mandatory ASLR). This mitigation forcibly relocates images not compiled with /DYNAMICBASE.
Reference:
https://support.microsoft.com/en-us/windows/app-browser-control-in-windows-security-8f68fb65-ebb4-3cfb-4bd7-ef0f376f3dc3