You have a Microsoft 365 E5 subscription.
You use Microsoft Intune to manage all Windows 11 devices.
You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile1 to all the devices.
A user reports that an Adobe Reader plug-in is now blocked.
You need to ensure that the plug-in is unblocked.
What should you do?
To unblock the Adobe Reader plug-in that was blocked due to the Attack Surface Reduction (ASR) policy, you need to adjust the ASR rules to make an exception for this particular plug-in. Configuring the ASR Only Per Rule Exclusions in Profile1 allows you to specify which applications or files should be excluded from the blocking rules, thereby unblocking the plug-in without disabling the overall policy.
Only C makes sense in the context of the question, seems correct.
Answer appears correct. Endpoint Privilege Management policy enables users to run tasks requiring elevated privilege without administrator rights. Scope tags determine which objects admins can see. Device Compliance Policy wouldn't impact ASR policy