Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
You manage Windows 11 devices that are enrolled in Microsoft Intune. Administrators sometimes disable Microsoft Defender Antivirus real-time protection while troubleshooting and then forget to turn it back on. You must create an Endpoint security Antivirus policy that blocks any local user, including administrators, from switching real-time protection off, while still keeping the feature enabled. Which policy setting should you configure, and how?
Enable the setting "Turn off real-time protection".
Configure the setting "Allow users to pause real-time protection" and set it to Disabled.
Enable the "Intrusion prevention system" option in the firewall policy.
Disable user access to the Microsoft Defender Antivirus interface.
In an Endpoint security Antivirus policy for Windows 10 and later, the setting that controls whether users can turn off Microsoft Defender Antivirus real-time protection is Allow users to pause real-time protection. Setting this value to Disabled (sometimes shown as No) keeps real-time protection enabled and prevents all local users, including administrators, from pausing or turning it off. The other options are incorrect:
Turning on the setting Turn off real-time protection disables the feature completely, which does not meet the requirement.
Enable intrusion prevention system is an unrelated setting found in firewall, not antivirus, policies.
Blocking user interface access removes the Microsoft Defender UI but does not stop a local administrator from disabling the service through PowerShell or other tools.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Defender Antivirus real-time protection, and why is it important?
Open an interactive chat with Bash
What does the 'Allow users to pause real-time protection' setting do?
Open an interactive chat with Bash
How does Intune enforce antivirus policies on Windows devices?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Protect devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .