MS-102 Question #293: Real Exam Question with Answer & Explanation

The correct answer is A: Device1 only. Endpoint security policies using the Defender Update controls template are applicable only to Windows devices managed by Intune.

Submitted by kim_seoul· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 E5 subscription that contains the devices shown in the following table. You plan to create an Endpoint security policy by using the Defender Update controls template. To which devices can you apply the policy?

Options

ADevice1 only
BDevice1 and Device2 only
CDevice1 and Device3 only
DDevice1, Device2, and Device3

Explanation

Endpoint security policies using the Defender Update controls template are applicable only to Windows devices managed by Intune.

Common mistakes.

B. macOS devices do not use Windows Defender Antivirus and therefore cannot have 'Defender Update controls' policies applied to them.
C. Linux devices do not use Windows Defender Antivirus and therefore cannot have 'Defender Update controls' policies applied to them.
D. macOS and Linux devices do not use Windows Defender Antivirus, making the 'Defender Update controls' policy inapplicable to them.

Concept tested. Endpoint security policy applicability for Defender Update controls

Reference. https://learn.microsoft.com/en-us/mem/intune/protect/endpoint-security-antivirus-policy

Topics

#Endpoint security#Microsoft Defender for Endpoint#Intune policies#Windows device management

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice Browse All MS-102 Questions