Exam MD-102 topic 1 question 21 discussion

for firewall E: https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/create-windows-firewall-rules-in-intune for antiviurs D: https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#microsoft-defender-antivirus

B and C are the correct answers : B. Creating a device configuration profile and configuring the Device restrictions settings allows you to manage the Microsoft Defender Firewall settings on your Azure AD joined Windows 10 devices through Microsoft Intune. This profile can help you configure and manage firewall rules and settings without the need for traditional Group Policy. C. Creating a device configuration profile and configuring the Endpoint protection settings allows you to manage Microsoft Defender Antivirus settings on your Azure AD joined Windows 10 devices through Microsoft Intune. This profile enables you to configure antivirus settings, exclusions, scanning options, and more, all while minimizing administrative effort.

CE is the Answer

The correct actions are: C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings. E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings. These two options minimize administrative effort by using Microsoft Intune to centrally manage both Microsoft Defender Antivirus and Microsoft Defender Firewall. The Endpoint protection settings in a device configuration profile allow you to configure both firewall and antivirus settings for Intune-managed devices, streamlining the process and avoiding the need for Group Policy Objects (GPOs).

Yes, FOR AV - Device Restriction and AV For FW - Endpoint Protection - FW

Just open up intune and you can see for yourself. Endpoint Protection contains the Firewall configuration. Device restrictions contains MS Antivirus configuration.

D. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings. Configure Microsoft Defender Antivirus using Device restrictions in Intune E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings. Configure Microsoft Defender Firewall rules using Endpoint protection in Intune These selections ensure that the configurations for both Microsoft Defender Antivirus and Microsoft Defender Firewall are managed through Intune, aligning with the goal of minimizing administrative effort.

D&E are correct options. Tested in lab 2024/07

C and E you can configure both from the endpoint protection template

Perplexity AI To configure Microsoft Defender Firewall and Microsoft Defender Antivirus on your Azure AD-joined Windows 10 devices managed by Microsoft Intune, and to minimize administrative effort, you should perform the following actions: To configure Microsoft Defender Antivirus: Create a device configuration profile and configure the Endpoint protection settings. This allows you to manage antivirus policies directly through Intune, which is streamlined for managing multiple devices in an enterprise environment. To configure Microsoft Defender Firewall: Create a device configuration profile and configure the Endpoint protection settings. This approach also leverages Intune's capabilities to manage firewall settings across all devices efficiently. Therefore, the correct answers are: C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings. E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.

DE is 100% right. I have verified. Be relaxed.

BC is the answer Microsoft defender firewall is managed in device restrictions and AV in endpoint protection...the way you guys get lost is disturbing

To configure Microsoft Defender Firewall and Microsoft Defender Antivirus on your Azure AD-joined Windows 10 devices while minimizing administrative effort, you should perform the following actions: B. To configure Microsoft Defender Firewall: Create a device configuration profile in Microsoft Intune. Configure the Device restrictions settings within the profile. Specify the desired firewall rules and settings for your devices. C. To configure Microsoft Defender Antivirus: Create another device configuration profile in Microsoft Intune. Configure the Endpoint protection settings within the profile. This allows you to manage antivirus settings, exclusions, and other related configurations. By following these steps, you can effectively set up both Microsoft Defender Firewall and Microsoft Defender Antivirus without the need for additional Group Policy Objects (GPOs) or manual administrative tasks.

Answer is DE

Answers are C & E. You can manage both with endpoint security configuration profile. I have confirmed this in my own tenant. Device Restriction is more about what length of password users should have etc.

Dumb question. C is also correct it seems: "Antivirus policies include the same settings as found endpoint protection or device restriction templates for device configuration policy. However, those policy types include additional categories of settings that are unrelated to Antivirus. ----->>>>> The additional settings can complicate the task of configuring Antivirus workload" https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-antivirus-policy correct me if im wrong, but fail to see how

AGREE WITH DE