nerdexam
Microsoft

SC-200 · Question #98

You have a Microsoft 365 subscription that contains 1,000 Windows 10 devices. The devices have Microsoft Office 365 installed. You need to mitigate the following device threats: - Microsoft Excel…

The correct answer is B. attack surface reduction rules in Microsoft Defender for Endpoint. Attack Surface Reduction rules. Block all Office applications from creating child processes Block executable content from email client and webmail https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface…

Submitted by emma.c· Apr 18, 2026Manage threat mitigation using Microsoft Defender for Endpoint

Question

You have a Microsoft 365 subscription that contains 1,000 Windows 10 devices. The devices have Microsoft Office 365 installed. You need to mitigate the following device threats:

  • Microsoft Excel macros that download scripts from untrusted websites
  • Users that open executable attachments in Microsoft Outlook
  • Outlook rules and forms exploits

What should you use?

Options

  • AMicrosoft Defender Antivirus
  • Battack surface reduction rules in Microsoft Defender for Endpoint
  • CWindows Defender Firewall
  • Dadaptive application control in Azure Defender

How the community answered

(38 responses)
  • A
    5% (2)
  • B
    76% (29)
  • C
    16% (6)
  • D
    3% (1)

Explanation

Attack Surface Reduction rules. Block all Office applications from creating child processes Block executable content from email client and webmail https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface- reduction-rules-reference?view=o365-worldwide

Topics

#Attack Surface Reduction#Microsoft Defender for Endpoint#Endpoint protection#Threat mitigation

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full SC-200 Practice