You use Microsoft Defender for Endpoint to protect computers that run Windows 10.
You need to assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline.
Which tool should you use?
To assess the differences between the configuration of Microsoft Defender for Endpoint and the Microsoft-recommended configuration baseline, you should use the Microsoft 365 Defender portal. This portal provides a centralized interface for managing security across your Microsoft 365 environment, including features like the Threat & Vulnerability Management (TVM) tool. The TVM tool offers capabilities to compare your current security configuration against Microsoft's recommended baselines, highlighting gaps and deviations in your configuration and providing actionable insights to improve your security posture.
B. Microsoft Secure Score https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score
I also tend to B. It's also chatGPTs choice: B. Microsoft Secure Score Microsoft Secure Score is a tool that helps organizations assess their security posture across various Microsoft products, including Microsoft Defender for Endpoint. It provides recommendations and best practices based on Microsoft's security baseline configurations. By using Microsoft Secure Score, you can evaluate the configuration of Microsoft Defender for Endpoint against the recommended configuration baseline and identify areas where improvements can be made to enhance your overall security posture.
I think B should be the answer as well. https://learn.microsoft.com/en-us/microsoft-365/security/defender/microsoft-secure-score?view=o365-worldwide
Where does that article mention Security Baselines? Answer is D where you look to assess the custom security policies over Security Policies.
B. Microsoft Secure Score
Secure score is stated in MD101 exam topics https://www.examtopics.com/discussions/microsoft/view/65809-exam-md-101-topic-4-question-48-discussion/
As other's stated.
https://learn.microsoft.com/en-us/defender-vulnerability-management/tvm-security-baselines#get-started-with-security-baselines-assessment
D. Microsoft 365 Defender portal The Microsoft 365 Defender portal provides a centralized interface for managing security across your Microsoft 365 environment, including Microsoft Defender for Endpoint. It includes the "Threat & Vulnerability Management" (TVM) feature, which offers capabilities to compare your current security configuration against Microsoft's recommended baselines. This tool helps you identify gaps and deviations in your configuration, providing actionable insights to improve your security posture.
Why NOT B While Secure Score provides an overall security posture assessment and recommendations for your Microsoft 365 environment, it is more focused on broad security measures rather than detailed configuration comparisons specifically for Microsoft Defender for Endpoint.
Microsoft secure score does not compare settings of a security baseline with the available options in a custom security policy. You need to look at the baseline in 365 admin and assess the differences in creating a custom baseline. B isn't correct because secure score gives you a wide range of options to change to improve your score which do not necessarily only recommend the baseline. Correct answer is D.
B is correct.
Option B: Microsoft Secure score