nerdexam
Microsoft

MS-102 · Question #421

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains Windows 11 devices. You need to recommend a solution to prevent antivirus and real-time…

The correct answer is B. tamper protection. Tamper protection is a capability in Microsoft Defender for Endpoint that helps protect certain security settings, such as virus and threat protection, from being disabled or changed. To prevent antivirus and real-time protection on devices from being modified or disabled in…

Submitted by hans_de· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains Windows 11 devices. You need to recommend a solution to prevent antivirus and real-time protection on the devices from being modified or disabled. What should you include in the recommendation?

Options

  • AEnforcement scope
  • Btamper protection
  • CAuto remediation
  • Dendpoint detection and response (EDR) in block mode
  • ELive Response

How the community answered

(21 responses)
  • A
    5% (1)
  • B
    81% (17)
  • C
    5% (1)
  • D
    10% (2)

Explanation

Tamper protection is a capability in Microsoft Defender for Endpoint that helps protect certain security settings, such as virus and threat protection, from being disabled or changed. To prevent antivirus and real-time protection on devices from being modified or disabled in Microsoft Defender for Endpoint, utilize tamper protection and configure it through Intune or Group Policy. Tamper protection helps safeguard security settings, including those related to antivirus and threat protection, from being altered or disabled by unauthorized users or https://learn.microsoft.com/en-us/defender-endpoint/prevent-changes-to-security-settings-with- tamper-protection

Topics

#Tamper protection#Defender for Endpoint#Real-time protection#Windows 11

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice