ExamworthyExamworthy
Open the appStart free

MS-102 - Manage Security and Threats by Using Microsoft Defender XDR - Section 3.1

Manage security reports and alerts using the Microsoft Defender portal.

Use the Microsoft Defender portal to review the incidents queue, threat analytics, and secure score to understand the current security posture of a tenant. Recognise how the action center surfaces pending and completed automated remediation actions.

Microsoft Defender portalsecure scoreincidents queuethreat analyticsaction center

Practice question for this objective

Free sampleManage Security and Threats by Using Microsoft Defender XDReasy

You manage 350 Windows 11 devices that are enrolled in Microsoft Intune. You need to onboard the devices to Microsoft Defender for Endpoint by using the method that scales best for managed devices. Which deployment method should you choose in the Microsoft Defender portal onboarding page?

  • ALocal script
  • BMicrosoft Intune / MDM Correct
  • CVDI onboarding scripts
  • DGroup Policy
Apply the documented Microsoft 365 / Microsoft Entra ID behaviour to the scenario. For Windows 10 and Windows 11 client devices that are already enrolled in Intune, the Microsoft Intune / Mobile Device Management option is the supported and scalable onboarding method.

Why A is wrong: The local script is officially limited to up to 10 devices and is intended for pilot or test scenarios only.

Why B is correct: Correct. For Windows 10 and Windows 11 client devices that are already enrolled in Intune, the Microsoft Intune / Mobile Device Management option is the supported and scalable onboarding method.

Why C is wrong: VDI scripts target non-persistent virtual desktop infrastructure devices, not standard managed laptops.

Why D is wrong: Group Policy works but Intune is the recommended scalable method for devices already managed by Intune.

See more MS-102 practice questions, answers explained.

More in this domain

Back to all Manage Security and Threats by Using Microsoft Defender XDR objectives, or the MS-102 cert hub.

Examworthy is not affiliated with or endorsed by Microsoft. Original, blueprint-aligned practice material only.