Microsoft 365 Endpoint Administrator Associate MD-102 Practice Question
Your organization manages Windows 10 and Windows 11 devices with Intune. A third-party antivirus is the primary provider, so Microsoft Defender Antivirus runs in passive mode. You assign an Endpoint security ASR rules profile that sets "Block executable content from email and webmail" to Block, but no ASR events appear on the devices. Which prerequisite must be met for the rule to take effect?
Enable Tamper Protection in Microsoft Defender Antivirus
Deploy Microsoft Defender Application Guard for Microsoft Edge
Turn on Controlled folder access in Microsoft Defender Antivirus
Switch Microsoft Defender Antivirus from passive mode to active real-time protection
Attack surface reduction rules are enforced only when Microsoft Defender Antivirus real-time protection is running in active mode. If Defender Antivirus is disabled or in passive mode (as happens when a non-Microsoft antivirus registers as the primary provider), ASR rules do not process and no audit or block events are produced. Settings such as Tamper Protection, Application Guard, or Controlled folder access enhance security but are not prerequisites for ASR rules. Therefore, Defender Antivirus must be switched to active mode so its real-time engine can evaluate and enforce the configured ASR rule.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Defender Antivirus real-time protection?
Open an interactive chat with Bash
What are Attack Surface Reduction (ASR) rules, and how do they enhance security?
Open an interactive chat with Bash
What happens if Microsoft Defender Antivirus is in passive mode?
Open an interactive chat with Bash
Microsoft 365 Endpoint Administrator Associate MD-102
Protect devices
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .