You have a server that runs Windows Server. You need to enable the following security features: Core isolation Force randomization for images (Mandatory ASLR) Which Windows Security tile should you…

Question

Explanation

This question tests knowledge of Windows Security Center and which specific security tile houses Core Isolation and Mandatory ASLR (Force randomization for images) settings.

Approach. Both 'Core Isolation' and 'Force randomization for images (Mandatory ASLR)' are found under the 'Device Security' tile in Windows Security. Core Isolation includes Memory Integrity (HVCI) and is managed from the Device Security > Core isolation details page. Mandatory ASLR is also under Device Security > Exploit protection settings (within the System settings tab), not under App & browser control, even though Exploit Protection is accessible from that tile too - the key distinction is that Core Isolation is exclusively in Device Security, while Exploit Protection settings (including Mandatory ASLR) are surfaced under App & browser control > Exploit protection. Therefore: Core Isolation → Device Security tile; Force randomization for images (Mandatory ASLR) → App & browser control tile (Exploit protection section).

Concept tested. Windows Security Center tile navigation - specifically distinguishing that Core Isolation (Memory Integrity/HVCI) lives under 'Device Security', while Exploit Protection settings like Mandatory ASLR (Force randomization for images) are configured under 'App & browser control' > Exploit protection > System settings.

Reference. Microsoft Docs: Windows Security app - Device Security (docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-security-center/wdsc-device-security) and Exploit Protection (docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/exploit-protection)

No community discussion yet for this question.