Exam MD-102 topic 1 question 276 discussion

Checked in tenant answers are correct: File explorer -> data execution prevention Device Guard -> VBS options are: Not configured, VBS with secureboot, VBS with secureboot and DMA

Given answer is correct. File Explorer "Turn off Data Execution Prevention for Explorer Baseline default: Disabled" Ref: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1#:~:text=Turn%20off%20Data%20Execution%20Prevention%20for%20Explorer%0ABaseline%20default%3A%20Disabled Device Guard "Enable Virtualization Based Security Baseline default: Enable virtualization based security." Ref: https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1#:~:text=Enable%20Virtualization%20Based%20Security%0ABaseline%20default%3A%20Enable%20virtualization%20based%20security.

In the context of Windows 365 Cloud PC devices, if you need to disable Data Execution Prevention (DEP), you should be looking at the "Microsoft Defender Antivirus" configuration within the Windows 365 Security Baseline profile. DEP is related to memory protection settings managed by Microsoft Defender Exploit Guard, which is part of the broader Microsoft Defender security suite. To enable virtualization-based security (VBS) and Secure Boot for Cloud PC devices using the Windows 365 Security Baseline profile, you need to focus on the configuration of System Guard (Device Guard) and System Security settings rather than only Microsoft Defender.

https://learn.microsoft.com/en-us/mem/intune/protect/security-baseline-settings-windows-365?pivots=win365-24h1 Answers are correct