Knowledge check

1.

Northwind Traders has several users that have been running unauthorized software. As a result, the company has begun experiencing a higher incidence of malware infections and help-desk calls. What can Northwind Traders do to restrict which software can run on user PC's and devices?

Implement the Microsoft Security Compliance Toolkit

Implement AppLocker

Implement Windows Device Health Attestation

2.

As the IT Support professional for Tailspin Toys, you enabled AppLocker restrictions for the Universal Windows apps by configuring the appropriate Group Policy settings. You did so by creating a new rule in the Local Group Policy editor. During this process, you created the default rule. What does the default rule do?

It enables the Application Identity service to run on all computers affected by your AppLocker policy

It enables all signed package apps to run

It identifies applications, and then processes the AppLocker policies against the identified applications

3.

What feature in Microsoft Defender for Endpoint enables it to identify attacker tools, techniques, and procedures, and generate alerts when these are observed in collected sensor data?

Threat intelligence

Cloud security analytics

Endpoint behavioral sensors

4.

Which Microsoft Defender for Endpoint feature protects Windows kernel-mode processes against the injection and execution of malicious or unverified code?

Microsoft Defender Application Guard

Microsoft Defender Exploit Guard

Microsoft Defender Device Guard

5.

As the Enterprise Security administrator for Fabrikam, Holly Spencer wants to manage the company's group policy objects (GPOs). What tool should Holly use to accomplish this task?

The Group Policy Management Editor

The AppLocker Microsoft Management Console

The Microsoft Security Compliance Toolkit

Check your knowledge

Feedback