SC-100 · Question #232
You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 E5 licenses and the Microsoft Defender Vulnerability Management add-on. The
Sign in or unlock SC-100 to reveal the answer and full explanation for question #232. The question stem and answer options stay visible for context.
Question
You have a Microsoft 365 tenant that contains 5,000 users and 5,000 Windows 11 devices. All users are assigned Microsoft 365 E5 licenses and the Microsoft Defender Vulnerability Management add-on. The Windows 11 devices are managed by using Microsoft Intune and Microsoft Defender for Endpoint. The Windows 11 devices are configured during deployment to comply with Center for Internet Security (CIS) benchmarks for Windows 11. You need to recommend a compliance solution for the Windows 11 devices. The solution must identify devices that were modified and no longer comply with the CIS benchmarks. What should you include in the recommendation?
Options
- AAuthenticated scan for Windows in Microsoft Defender Vulnerability Management
- BMicrosoft Secure Score for Devices in Defender for Endpoint
- Cattack surface reduction (ASR) rules in Defender for Endpoint
- Dsecurity baselines assessments in Microsoft Defender Vulnerability Management
Unlock SC-100 to see the answer
You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.