You are designing a ransomware response plan that follows Microsoft Security Best Practices. You need to recommend a solution to minimize the risk of a ransomware attack encrypting local user files…

Question

Options

• AWindows Defender Device Guard
• BMicrosoft Defender for Endpoint
• CAzure Files
• DBitLocker Drive Encryption (BitLocker)
• Eprotected folders

• A
  2% (1)
• B
  4% (2)
• C
  2% (1)
• E
  91% (41)

Explanation

Protected folders (also known as Controlled Folder Access, a feature of Microsoft Defender Antivirus) is the most direct control for preventing ransomware from encrypting local user files. It monitors changes to files in designated protected folders (such as Documents, Pictures, etc.) and blocks any process not on the trusted applications list from making modifications-this directly neutralizes the file-encryption behavior of ransomware. Option A (Device Guard) enforces application whitelisting at the kernel level but does not specifically protect user data folders from file modification by allowed processes. Option B (Defender for Endpoint) is a broader EDR platform; while it detects ransomware, it does not proactively block file encryption in the same targeted way. Option C (Azure Files) stores files in the cloud but does not protect local files. Option D (BitLocker) encrypts the disk at rest to protect against physical theft, but provides no protection against ransomware encrypting files while the system is running and the user is logged in.

No community discussion yet for this question.