Microsoft Exam MD-102 Topic 1 Question 30 Discussion

Actual exam question for Microsoft's MD-102 exam

Question #: 30
Topic #: 1

You have a Microsoft 365 E5 subscription.

You use Microsoft Intune to manage all Windows 11 devices.

You create an attack surface reduction (ASR) policy named Profile1 based on the Attack Surface Reduction Rules profile and assign Profile! to all the devices.

A user reports that an Adobe Reader plug-in is now blocked.

You need to ensure that the plug-in is unblocked.

What should you do?

ACreate an Endpoint Privilege Management policy and assign the policy to all the devices.

BAdd a scope tag to Profile1.

CConfigure ASR Only Per Rule Exclusions in Profile1.

DCreate a device compliance policy and assign the policy to all the devices.

Show Suggested Answer

Suggested Answer: C

by Vincent at Aug 02, 2024, 12:07 PM

Limited Time Offer

25%

Off

Get Premium MD-102 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Diane

10 months ago

I think creating an Endpoint Privilege Management policy could be the solution.

upvoted 0 times

...

Virgie

10 months ago

I believe configuring ASR Only Per Rule Exclusions in Profile1 could also work.

upvoted 0 times

...

Glennis

10 months ago

I agree with Kirby, adding a scope tag might help.

upvoted 0 times

...

Elbert

10 months ago

I've got a hunch it's C. Wouldn't want to accidentally block the one tool that the entire company relies on, right? Gotta keep those plug-ins happy and running.

upvoted 0 times

Moon

9 months ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Maryann

9 months ago

B) Add a scope tag to Profile1.

upvoted 0 times

...

Kirby

10 months ago

I think we should add a scope tag to Profile1.

upvoted 0 times

...

Yoko

10 months ago

I think adding a scope tag to Profile1 (option B) could also help in unblocking the plug-in.

upvoted 0 times

...

Taryn

10 months ago

I'm not sure, maybe we should consider option A as well.

upvoted 0 times

...

Tomas

10 months ago

Ah, the joys of Intune management. I'd go with C as well. Gotta love those little exclusions that can save the day.

upvoted 0 times

My

9 months ago

C) I agree, exclusions can definitely come in handy in situations like this.

upvoted 0 times

...

Josue

9 months ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Chauncey

9 months ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Candida

10 months ago

Option C all the way! I can already picture the IT support team scrambling to figure this one out. Good thing we have these multiple-choice questions to keep them on their toes.

upvoted 0 times

Samira

10 months ago

A) Create an Endpoint Privilege Management policy and assign the policy to all the devices.

upvoted 0 times

...

Fatima

10 months ago

C) Configure ASR Only Per Rule Exclusions in Profile1.

upvoted 0 times

...

Stephania

11 months ago

I agree with Mollie, configuring ASR Only Per Rule Exclusions seems like the right choice.

upvoted 0 times

...

Mollie

11 months ago

I think we should go with option C.

upvoted 0 times

...

Alba

11 months ago

Hmm, I'd say go with option C. Seems like the most straightforward way to unblock that Adobe Reader plug-in without messing up the whole security profile.

upvoted 0 times

...