MD-102 Exam QuestionsBrowse all questions from this exam

MD-102 Exam - Question 133


DRAG DROP

-

You have a Microsoft 365 subscription that contains devices enrolled in Microsoft Intune.

You need to create Endpoint security policies to enforce the following requirements:

• Computers that run macOS must have FileVault enabled.

• Computers that run Windows 10 must have Microsoft Defender Credential Guard enabled.

• Computers that run Windows 10 must have Microsoft Defender Application Control enabled.

Which Endpoint security feature should you use for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

Show Answer
Correct Answer:

Discussion

6 comments
Sign in to comment
Merrybob
Feb 7, 2024

Disk Encryption ASR - Ref https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy#:~:text=Application%20control%20%2D%20Application,Constrained%20Language%20Mode. Account Protection - Ref https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/configure?tabs=intune#:~:text=You%20can%20also%20configure%20Credential%20Guard%20by%20using%20an%20account%20protection%20profile%20in%20endpoint%20security.

VirtualJP
Oct 17, 2023

Agree answer is correct

ITCALegends
Oct 17, 2023

ASR?? Anyone also Unsure about the second Point???

NoursBear
Jan 14, 2024

Yes I have a doubt, from my research WDAC is configured through OMA-URI, I see no policy under Endpoint Security blade and under ASR Policy I don't see anything for WDAC

NoursBear
Jan 14, 2024

OK so when creating a new ASR profile, you can chose an Application Control template. This is new since 2022. So all good

Contactfornitish
Oct 18, 2023

ASR is correct https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy

yosry
Jan 2, 2024

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/configure?tabs=intune#:~:text=You%20can%20also%20configure%20Credential%20Guard%20by%20using%20an%20account%20protection%20profile%20in%20endpoint%20security.%20For%20more%20information%2C%20see%20Account%20protection%20policy%20settings%20for%20endpoint%20security%20in%20Microsoft%20Intune.

oopspruu
Jul 21, 2024

Provided answers are correct as of 2024/07.