ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam
Go to Exam

Exam MS-102 topic 1 question 331 discussion

Actual exam question from Microsoft's MS-102
Question #: 331
Topic #: 1
[All MS-102 Questions]

You have a Microsoft 365 subscription that includes Microsoft Intune and Microsoft Defender XDR.

All users have devices that run Windows 11.

From the Microsoft Defender portal, you review the Microsoft Secure Score recommendations. One of the top recommendations is to block all Microsoft Office applications from creating child processes.

You need to increase the secure score by addressing the recommendation.

What should you do?

  • A. Select Safe Documents for Office clients.
  • B. Create a policy for Office applications.
  • C. Configure an endpoint detection and response (EDR) policy.
  • D. Create an attack surface reduction (ASR) policy.
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Preeb at Oct. 17, 2024, 6:07 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Krayzr
3 months, 2 weeks ago
Selected Answer: D
Block all Office applications from creating child processes >> Yes https://learn.microsoft.com/en-us/defender-endpoint/attack-surface-reduction-rules-reference#attack-surface-reduction-rules-by-type
upvoted 3 times
...
KoenJas
5 months, 4 weeks ago
D. Create an attack surface reduction (ASR) policy.
upvoted 3 times
...
Preeb
6 months, 1 week ago
ASR Policy is correct.
upvoted 4 times
JohnDoe47
5 months, 4 weeks ago
https://learn.microsoft.com/en-us/defender-endpoint/attack-surface-reduction-rules-reference
upvoted 3 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago