Exam SC-100 topic 1 question 26 discussion

The primary goal here is to minimize the risk of ransomware encrypting local user files. A feature designed to protect against unauthorized access to critical system files and user data, particularly from ransomware, is protected folders. Option E, "protected folders," should be included in the recommendation. In Windows, the Controlled Folder Access feature protects files in key system folders and user-defined folders by only allowing authorized apps to make changes. This can prevent ransomware from encrypting files in those folders. While some of the other options listed, such as B. Microsoft Defender for Endpoint, may provide broader protection against malware, option E specifically targets the requirement to protect local user files against ransomware encryption. Therefore, the correct answer is: E. protected folders.

Protected folders

Protected folders, a feature of Microsoft Defender for Endpoint, can help safeguard your critical data by preventing unauthorized applications, including ransomware, from accessing and encrypting local user files.

Protected Folders feature is designed for this scenario. Read about it..

the request Includes Encryption, Controlled folder does not include Encryption, only controlling access

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/built-in-protection?view=o365-worldwide Microsoft Defender for Endpoint helps prevent, detect, investigate, and respond to advanced threats, such as ransomware attacks.

Protected Folders is a feature provided by Microsoft Defender Antivirus that helps safeguard specific folders from unauthorized changes. It is designed to protect user files, documents, and data from being encrypted by ransomware. This feature allows you to specify certain folders that are considered sensitive, and any attempt to make changes to files within those folders is closely monitored for suspicious activity. Reference: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-controlled-folders?view=o365-worldwide

Joining to endpoint alone is useless until you start configuring based on your needs

Controlled Folder Access is a feature of Microsoft Defender for Endpoint that helps protect your valuable data from malicious apps and threats, such as ransomware. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-controlled-folders?view=o365-worldwide

in exam Nov 23

How can I help keep my PC secure? Make sure your PC is up to date with the latest version of Windows and all the latest patches. Learn more about Windows Update. Be sure Windows Security is turned on to help protect you from viruses and malware (or Windows Defender Security Center in previous versions of Windows 10). In Windows 10 or 11 turn on Controlled Folder Access to protect your important local folders from unauthorized programs like ransomware or other malware. Link: https://support.microsoft.com/en-us/windows/protect-your-pc-from-ransomware-08ed68a7-939f-726c-7e84-a72ba92c01c3

"Controlled folder access is especially useful in helping to protect your documents and information from ransomware" https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/controlled-folders?view=o365-worldwide

B is correct answer - Controlled folder access works best with Microsoft Defender for Endpoint, which gives you detailed reporting into controlled folder access events and blocks as part of the usual alert investigation scenarios.

E is correct

option E https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/controlled-folders?view=o365-worldwide

D https://learn.microsoft.com/es-mx/azure/security/fundamentals/data-encryption-best-practices