Question
You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.
You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices. The solution must minimize administrative effort.
Which two actions should you perform? Each correct answer presents part of the solution.
- A. To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure the Windows Defender Antivirus settings.
- B. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
- C. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
- D. To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings. Correct
- E. To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings. Correct
- F. To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.
Explanation
In Intune device configuration templates, the Microsoft Defender Antivirus settings are in the Device restrictions profile, while Microsoft Defender Firewall settings are in the Endpoint protection profile. The Endpoint protection template covers Firewall, Application Guard, SmartScreen, encryption and Exploit Guard, but not the core antivirus settings, and Device restrictions has no firewall section. GPOs do not apply to Azure AD joined devices without an on-premises domain, so they do not meet the requirement.
