Question
You have a Microsoft 365 subscription that includes Microsoft Intune.
You need to implement a Microsoft Defender for Endpoint solution that meets the following requirements:
- Enforces compliance for Defender for Endpoint by using Conditional Access
- Prevents suspicious scripts from running on devices
What should you configure? To answer, drag the appropriate features to the correct requirements. Each feature may be used once, more than once, or not at all.
Explanation
To use Defender for Endpoint device risk in Intune compliance policies and Conditional Access, you must enable the connection between Microsoft Defender for Endpoint and Intune, so devices report their machine risk score to Intune. Attack surface reduction rules include rules that block execution of potentially obfuscated scripts and block JavaScript or VBScript from launching downloaded content, which prevents suspicious scripts from running. Security baselines and device restriction policies configure general settings and do not provide either capability on their own.
