Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
You are an Intune administrator for Contoso. You plan to deploy an Endpoint security attack surface reduction (ASR) policy that targets the rule Block credential stealing from the Windows LSASS process. For the first 14 days you want to collect telemetry only and avoid disrupting any existing software. Which rule state should you configure for this ASR rule in the policy?
Setting the rule state to Audit allows Microsoft Defender to generate event ID 1121 when a process attempts to read LSASS memory, but it does not stop or modify the process. Block would immediately prevent the action, Disable (or Not configured) turns the rule off and records no events, and Warn silently blocks actions and can still interfere with workflows. Therefore, Audit is the correct choice when you need to measure potential impact without enforcement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Endpoint Security Attack Surface Reduction (ASR)?
Open an interactive chat with Bash
What is the LSASS process and why is it targeted for protection?
Open an interactive chat with Bash
How does the Audit state work in ASR rules?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Protect devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99 $11.99
$11.99/mo
Billed monthly, Cancel any time.
$19.99 after promotion ends
3 Month Pass
$44.99 $26.99
$8.99/mo
One time purchase of $26.99, Does not auto-renew.
$44.99 after promotion ends
Save $18!
MOST POPULAR
Annual Pass
$119.99 $71.99
$5.99/mo
One time purchase of $71.99, Does not auto-renew.
$119.99 after promotion ends
Save $48!
BEST DEAL
Lifetime Pass
$189.99 $113.99
One time purchase, Good for life.
Save $76!
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .