Exam MD-102 topic 1 question 20 discussion

The wording of the question is You need to ensure that you CAN apply Microsoft Defender for Endpoint antivirus policies to the macOS devices. that suggests you need to make the devices ABLE to receive the policies, not push the policies themselves. Creating a configuration profile alone will not enable you to apply policies, Microsoft Defender for Endpoint needs to be installed and then you CAN apply policies.

C wont minimize admin effort Answer is D

https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune

You need to install Defender to apply Defender Policys on Mac. On Windows it's already installed.

Microsoft portals and tests says its C

To ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices enrolled in Microsoft Intune, you need to install Microsoft Defender for Endpoint on the macOS devices. This is a prerequisite for managing antivirus policies for macOS devices through Intune. After installation, the devices can be onboarded to Defender for Endpoint, which allows Intune to enforce antivirus configurations on these devices effectively. While configuration profiles are used to set specific policies, the Defender for Endpoint client must first be installed to enable these policies to function. This minimizes administrative effort as the installation process and onboarding streamline policy application across devices. Thus, the correct answer is: C. Install Defender for Endpoint on the macOS devices. https://learn.microsoft.com/en-us/mem/intune/apps/apps-advanced-threat-protection-macos

without defender for endpoint, you can't apply the policy. the policies are there, ms asks to ensure that you can apply them. For me, first of all, you have to install endpoint defender

For Intune to manage antivirus settings on a device, Microsoft Defender for Endpoint must be installed on that device. See. Microsoft Defender for Endpoint for macOS (In the Microsoft Defender for Endpoint documentation) https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-antivirus-policy

Answer is D as Microsoft themselves state: Create system configuration profiles The next step is to create system configuration profiles that Microsoft Defender for Endpoint needs. In the Microsoft Intune admin center, open Devices > Configuration profiles. Source: https://learn.microsoft.com/en-us/defender-endpoint/mac-install-with-intune

A configuration profile in Intune can be used to manage settings and enforce compliance policies across devices. While it can help deploy software or set configurations, it's not typically used for directly installing applications like Microsoft Defender for Endpoint. Instead, configuration profiles are generally used for settings such as VPN configurations, Wi-Fi profiles, or security settings. What Needs to Happen: To apply antivirus policies from Microsoft Defender for Endpoint to macOS devices, the Defender software itself must first be installed on the devices. Simply creating a configuration profile in Intune without ensuring that the Defender application is installed won't allow you to enforce these antivirus policies.

I vote D: From the Microsoft Intune admin center, create a configuration profile. Ensure that Microsoft Defender for Endpoint is automatically deployed Microsoft Defender for Endpoint will implement the security configuration settings it receives from Microsoft Intune. We must first verify that communications are taking place between Defender for Endpoint and Intune. From the Microsoft 365 Defender portal select Settings > Endpoints >Advanced features, and make sure that we switch the connection to Microsoft Intune to On. Next, create a device configuration profile that automatically onboards Intune assets to Defender for Endpoint and assign it to the designated clients. Source: Hardening Windows Clients with Microsoft Intune and Defender for Endpoint

To ensure that you can apply Microsoft Defender for Endpoint antivirus policies to the macOS devices and minimize administrative effort, you should: C. Install Defender for Endpoint on the macOS devices. Installing Defender for Endpoint on the macOS devices is a prerequisite to applying antivirus policies through Microsoft Intune. Once Defender for Endpoint is installed, you can manage and enforce security policies using Intune.

Answer is D this will minimize administrative effort, imagine installing Defender on 500 devices manually :(

D. From the Microsoft Intune admin center, create a configuration profile. Creating a configuration profile in Intune allows you to configure settings and features on managed devices, including macOS devices. You can use configuration profiles to apply security settings, including antivirus policies provided by Microsoft Defender for Endpoint, ensuring that macOS devices are protected without the need for manual intervention on each device.

You're right to question this. While installing Defender for Endpoint on the macOS devices (option C) is indeed necessary to enable antivirus protection, the question specifically asks for the action that ensures you can apply antivirus policies with minimal administrative effort. Installing Defender for Endpoint is just the initial step. However, creating a configuration profile (option D) allows you to define and apply antivirus policies centrally to multiple devices at once, which aligns with the requirement to minimize administrative effort. Therefore, option D is the more appropriate choice for achieving the stated objective.

Para instalar o Defender em 500 dispositivos macOS você precisa criar um perfil de configuração portanto a resposta e D

Answer is C