QUESTION: 137 Exam Topic: 2 - Question Set 2

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint. From Microsoft Defender for Endpoint, you turn on the Allow or block le advanced feature.
You need to block users from downloading a le named File1.exe.
What should you use?

a suppression rule
an indicator
a device con guration pro le

Answer(s): B

Reference:

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/respond- le-alerts#allow-or-block- le

Reveal Solution Next Question

QUESTION: 138 Exam Topic: 2 - Question Set 2

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint. When users attempt to access the portal of a partner company, they receive the message shown in the following exhibit.

You need to enable user access to the partner company's portal.
Which Microsoft Defender for Endpoint setting should you modify?

Custom detections
Advanced hunting
Alert noti cations
Indicators
Alert suppression

Answer(s): D

Reference:

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/manage-indicators?view=o365-worldwide

Reveal Solution Next Question

QUESTION: 139 Exam Topic: 2 - Question Set 2

HOTSPOT (Drag and Drop is not supported).
You have a Microsoft 365 subscription.
You create a Microsoft Defender for Cloud Apps policy named Risk1 based on the Logon from a risky IP address template as shown in the following exhibit.

You have two users named User1 and User2. Each user signs in to Microsoft SharePoint Online from a risky IP address 10 times within 24 hours. Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

QUESTION: 140 Exam Topic: 2 - Question Set 2

HOTSPOT (Drag and Drop is not supported).
You have a Microsoft Azure Activity Directory (Azure AD) tenant contains the users shown in the following table.

Group3 is a member of Group1.
Your company uses Microsoft Defender Advanced Threat Protection (ATP). Microsoft Defender ATP contains the roles shown in the following table.

Microsoft Defender ATP contains the device groups shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area: