MD-102 Question #160: Real Exam Question with Answer & Explanation

Question

You have an Azure Active Directory (Azure AD) tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune. You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

Options

• ATo configure Microsoft Defender Antivirus, create a device configuration profile and configure the
• BTo configure Microsoft Defender Firewall, crate a device configuration profile and configure the
• CTo configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure
• DTo configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure
• ETo configure Microsoft Defender Antivirus, create a device configuration profile and configure the
• FTo configure Microsoft Defender Firewall, create a device configuration profile and configure the

Explanation

Since the 100 devices are Azure AD joined and managed by Microsoft Intune, the correct approach is to use Intune device configuration profiles - not Group Policy Objects (GPOs). GPOs (choices C and D) require on-premises Active Directory domain membership and do not apply to Azure AD-joined devices managed solely by Intune. The correct options (E and F) use Intune device configuration profiles: option E creates a profile targeting Endpoint Security > Antivirus to configure Microsoft Defender Antivirus, and option F creates a profile targeting Endpoint Security > Firewall to configure Microsoft Defender Firewall. This approach minimizes administrative effort by centrally managing both settings from the Intune portal without requiring on-premises infrastructure.

No community discussion yet for this question.