You have an Azure subscription that uses Microsoft Defender for Endpoint. You need to ensure that you can allow or block a user-specified range of IP addressed and URLs. What should you enable first…

The correct answer is B. custom network indicators. In the prerequisite for "Create indicators for IPs and URLs/domains" Ensure that Custom network indicators is enabled in Microsoft 365 Defender > Settings > Advanced features. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip…

Submitted by takeshi77· Apr 18, 2026Manage threat mitigation using Microsoft Defender for Endpoint

Question

You have an Azure subscription that uses Microsoft Defender for Endpoint. You need to ensure that you can allow or block a user-specified range of IP addressed and URLs. What should you enable first in the Advanced features from the Endpoints Settings in the Microsoft 365 Defender portal?

Options

Aendpoint detection and response (EDR) in block mode
Bcustom network indicators
Cweb content filtering
DLive response for servers

How the community answered

(37 responses)

B
92% (34)
C
3% (1)
D
5% (2)

Explanation

In the prerequisite for "Create indicators for IPs and URLs/domains" Ensure that Custom network indicators is enabled in Microsoft 365 Defender > Settings > Advanced features. https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip- domain?view=o365-worldwide

Topics

#Microsoft Defender for Endpoint#Network protection#Custom indicators#Threat mitigation

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice