Exam MD-102 All QuestionsBrowse all questions from this exam
Go to Exam
Question 133

DRAG DROP

-

You have a Microsoft 365 subscription that contains devices enrolled in Microsoft Intune.

You need to create Endpoint security policies to enforce the following requirements:

• Computers that run macOS must have FileVault enabled.

• Computers that run Windows 10 must have Microsoft Defender Credential Guard enabled.

• Computers that run Windows 10 must have Microsoft Defender Application Control enabled.

Which Endpoint security feature should you use for each requirement? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.

    Correct Answer:

Discussion
Merrybob

Disk Encryption ASR - Ref https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy#:~:text=Application%20control%20%2D%20Application,Constrained%20Language%20Mode. Account Protection - Ref https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/configure?tabs=intune#:~:text=You%20can%20also%20configure%20Credential%20Guard%20by%20using%20an%20account%20protection%20profile%20in%20endpoint%20security.

ITCALegends

ASR?? Anyone also Unsure about the second Point???

NoursBear

Yes I have a doubt, from my research WDAC is configured through OMA-URI, I see no policy under Endpoint Security blade and under ASR Policy I don't see anything for WDAC

NoursBear

OK so when creating a new ASR profile, you can chose an Application Control template. This is new since 2022. So all good

VirtualJP

Agree answer is correct

oopspruu

Provided answers are correct as of 2024/07.

yosry

https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/configure?tabs=intune#:~:text=You%20can%20also%20configure%20Credential%20Guard%20by%20using%20an%20account%20protection%20profile%20in%20endpoint%20security.%20For%20more%20information%2C%20see%20Account%20protection%20policy%20settings%20for%20endpoint%20security%20in%20Microsoft%20Intune.

Contactfornitish

ASR is correct https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-asr-policy