You have a Microsoft 365 E5 subscription that contains 500 macOS devices enrolled in Microsoft Intune.
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. The solution must minimize administrative effort.
What should you do?
To ensure that Microsoft Defender for Endpoint antivirus policies can be applied to macOS devices, it is essential to have Defender for Endpoint installed on each device. Without the Defender for Endpoint client installed, the devices will not be able to receive or enforce the antivirus policies. Therefore, the correct step is to install Defender for Endpoint on the macOS devices.
The wording of the question is You need to ensure that you CAN apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. that suggests you need to make the devices ABLE to receive the policies, not push the policies themselves. Creating a configuration profile alone will not enable you to apply policies, Microsoft Defender for Endpoint needs to be installed and then you CAN apply policies.
C wont minimize admin effort Answer is D
Macs don't have Defender pre-installed. You can create and push as many policies as you want -- there's nothing on the client to interpret and enforce them. That is -- until you install Defender (it doesn't say "manually", you can push it through Intune, so not much effort).
D. From the Microsoft Intune admin center, create a configuration profile. The very first step to install Defender for macOS is to create a Configuration Profile. Ref: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-install-with-intune?view=o365-worldwide#create-system-configuration-profiles
You're right to question this. While installing Defender for Endpoint on the macOS devices (option C) is indeed necessary to enable antivirus protection, the question specifically asks for the action that ensures you can apply antivirus policies with minimal administrative effort. Installing Defender for Endpoint is just the initial step. However, creating a configuration profile (option D) allows you to define and apply antivirus policies centrally to multiple devices at once, which aligns with the requirement to minimize administrative effort. Therefore, option D is the more appropriate choice for achieving the stated objective.
You need to ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. Keyword apply. So the policies are already there. You only need to install Defender for endpoint on the computer to recieve and onboard the macbook devices. So, my answer is C.
thank you very much for your comment, I search for your comment each time i o not understand the answer
D Before deploying the App we need to deploy the onboarding package by using a configuration profile. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/mac-install-with-intune?view=o365-worldwide https://www.youtube.com/watch?v=VHKyYeRkArI&list=PLZ8cmQe-R7Hb_kuV24zW1G-6vDtmOgaoQ&index=12
the question is to ensure that you can apply Microsoft Defender for Endpoint antivirus policies. so we need to ensure that Microsoft defender for endpoint is installed before applying said policies. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/microsoft-defender-endpoint-mac?view=o365-worldwide
Installing Defender for Endpoint on the mac, you ensure that you can apply antivirus policies. Without installation policies are useless.
To ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices and minimize administrative effort, you should: C. Install Defender for Endpoint on the macOS devices. Installing Defender for Endpoint on the macOS devices is a prerequisite to applying antivirus policies through Microsoft Intune. Once Defender for Endpoint is installed, you can manage and enforce security policies using Intune.
Who writes these questions. The wording is really bad. Questions should be easy and clear. Anyways, my answer is C.
Bing AI says C is first and most important
C Installing Defender for Endpoint on macOS Devices: Microsoft Defender for Endpoint for macOS is a separate installation that needs to be deployed on each macOS device. Once installed, it integrates with Microsoft Defender Security Center and can be managed through Microsoft Intune. https://www.google.com/search?q=Installing+Defender+for+Endpoint+on+macOS+Devices&oq=Installing+Defender+for+Endpoint+on+macOS+Devices&gs_lcrp=EgZjaHJvbWUyBggAEEUYOTIKCAEQIRgWGB0YHtIBBzQ3N2owajeoAgCwAgA&sourceid=chrome&ie=UTF-8#fpstate=ive&vld=cid:5185ac1e,vid:M2mSCTrYgCY,st:0
Answer is D this will minimize administrative effort, imagine installing Defender on 500 devices manually :(
D. From the Microsoft Intune admin center, create a configuration profile. Creating a configuration profile in Intune allows you to configure settings and features on managed devices, including macOS devices. You can use configuration profiles to apply security settings, including antivirus policies provided by Microsoft Defender for Endpoint, ensuring that macOS devices are protected without the need for manual intervention on each device.
Para instalar o Defender em 500 dispositivos macOS você precisa criar um perfil de configuração portanto a resposta e D
Answer is C
C. To apply configured Microsoft Defender for Endpoint antivirus policies to macOS devices, you must install Microsoft Defender for Endpoint on macOS.