nerdexam
Microsoft

MS-102 · Question #150

You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are enrolled to Microsoft Intune and onboarded by using Microsoft Defender f

The correct answer is C. a device compliance policy. Configure a Device compliance policy that takes into consideration the Defender for endpoint to define if device is compliant or not compliant. https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create- windows#microsoft-defender-for-endpoint-rules

Submitted by hassan_iq· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 E5 subscription that has Microsoft Defender for Endpoint integrated with Microsoft Intune. Devices are enrolled to Microsoft Intune and onboarded by using Microsoft Defender for Endpoint. You plan to block devices based on the results of the machine risk score calculated by Microsoft Defender for Endpoint. What should you create first?

Options

  • Aa device configuration policy
  • Ban endpoint detection and response policy
  • Ca device compliance policy

How the community answered

(38 responses)
  • A
    18% (7)
  • B
    11% (4)
  • C
    71% (27)

Explanation

Configure a Device compliance policy that takes into consideration the Defender for endpoint to define if device is compliant or not compliant. https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create- windows#microsoft-defender-for-endpoint-rules

Topics

#Microsoft Intune#Microsoft Defender for Endpoint#Device Compliance#Conditional Access

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice