nerdexam
Microsoft

MS-102 · Question #111

You have a Microsoft 365 E5 subscription. You onboard all devices to Microsoft Defender for Endpoint. You need to use Defender for Endpoint to block access to a malicious website at Which two…

The correct answer is B. Enable Custom network indicators. D. Create an indicator. You should first enable Enable Custom Network indicators and then creatte an indicator. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip- domain?view=o365-worldwide#create-an-indicator-for-ips-urls-or-domains-from-the-settings-page

Submitted by kim_seoul· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 E5 subscription. You onboard all devices to Microsoft Defender for Endpoint. You need to use Defender for Endpoint to block access to a malicious website at Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct answer is worth one point.

Options

  • ACreate a web content filtering policy.
  • BEnable Custom network indicators.
  • CEnable automated investigation.
  • DCreate an indicator.
  • EConfigure an enforcement scope.

How the community answered

(53 responses)
  • A
    9% (5)
  • B
    81% (43)
  • C
    8% (4)
  • E
    2% (1)

Explanation

You should first enable Enable Custom Network indicators and then creatte an indicator. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip- domain?view=o365-worldwide#create-an-indicator-for-ips-urls-or-domains-from-the-settings-page

Topics

#Microsoft Defender for Endpoint#Custom Indicators#Threat Protection#Network Security

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice