Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
You manage Windows 10 and Windows 11 devices that are enrolled in Microsoft Intune and onboarded to Microsoft Defender for Endpoint. A third-party antivirus product will be deployed to all devices, but you must still collect endpoint detection and response (EDR) telemetry through Microsoft Defender for Endpoint. You need to create an Endpoint security > Antivirus policy that meets the requirement and prevents two antivirus engines from running simultaneously. Which setting should you configure in the Intune policy?
Enable Windows Defender periodic scanning so it runs only when the third-party product is idle.
Configure the "Turn off Microsoft Defender Antivirus" setting in the current security baseline.
Disable Real-time protection in the Microsoft Defender Antivirus policy.
Enable Passive mode in the Microsoft Defender Antivirus policy.
When the third-party antivirus product is installed, Microsoft Defender Antivirus must stop active protection yet continue to act as the EDR sensor for Microsoft Defender for Endpoint. This behavior is achieved by enabling Passive mode in a Microsoft Defender Antivirus profile. In passive mode, the Defender engine turns off real-time, scheduled, and on-demand scanning, avoiding conflicts with another antivirus solution, but it still sends telemetry to Defender for Endpoint. Disabling real-time protection or turning off Microsoft Defender Antivirus would either violate platform protection requirements or completely remove the EDR sensor. Periodic scanning keeps Defender active and would cause two engines to run side by side rather than disabling one of them.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Passive mode in Microsoft Defender Antivirus?
Open an interactive chat with Bash
Why is telemetry essential for Microsoft Defender for Endpoint?
Open an interactive chat with Bash
What would happen if you disable real-time protection instead of enabling Passive mode?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Protect devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .