Examice

Exam MD-102 All QuestionsBrowse all questions from this exam

Question 278

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all Windows 11 devices.

You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile1 to all the devices.

A user reports that an Adobe Reader plug-in is now blocked.

You need to ensure that the plug-in is unblocked.

What should you do?

Create an Endpoint Privilege Management policy and assign the policy to all the devices.

Add a scope tag to Profile1.

Configure ASR Only Per Rule Exclusions in Profile1.

Create a device compliance policy and assign the policy to all the devices.

Correct Answer: C

To unblock the Adobe Reader plug-in that was blocked due to the Attack Surface Reduction (ASR) policy, you need to adjust the ASR rules to make an exception for this particular plug-in. Configuring the ASR Only Per Rule Exclusions in Profile1 allows you to specify which applications or files should be excluded from the blocking rules, thereby unblocking the plug-in without disabling the overall policy.

Discussion

servLOption: C

Answer appears correct. Endpoint Privilege Management policy enables users to run tasks requiring elevated privilege without administrator rights. Scope tags determine which objects admins can see. Device Compliance Policy wouldn't impact ASR policy

chafeOption: C

Only C makes sense in the context of the question, seems correct.