Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Defender XDREasy
A Microsoft 365 administrator is configuring Microsoft Defender for Endpoint for a new organization. The administrator needs to ensure that all devices onboarding to Defender for Endpoint automatically receive the latest security updates and are configured with recommended security settings based on Microsoft's best practices. Which component of Defender for Endpoint should the administrator leverage to achieve this goal?
- AAutomated investigation and remediation
- BSecurity recommendations in Microsoft Defender Vulnerability Management
- CEndpoint Detection and Response (EDR) capabilities
- DAttack Surface Reduction rules
Show answer & explanationAnswer & explanation
Correct answer: B. Security recommendations in Microsoft Defender Vulnerability Management
Security recommendations within Microsoft Defender Vulnerability Management provide actionable insights and steps to improve the security posture of devices by addressing misconfigurations and applying updates.
Why the other options are wrong
- A. Automated investigation and remediation automatically investigates alerts and takes actions to resolve threats, rather than pro-actively configuring security settings.
- C. EDR capabilities detect and respond to advanced threats on endpoints, but do not inherently manage security updates or configuration best practices.
- D. Attack Surface Reduction rules prevent specific behaviors commonly used in malware attacks, but do not automatically ensure updates or general security settings.
Defender Vulnerability Management Security Recommendations
A feature within Microsoft Defender Vulnerability Management that provides actionable insights and guidance to improve the security posture of an organization's devices by identifying and prioritizing vulnerabilities and misconfigurations.
- Identifies software vulnerabilities and misconfigurations.
- Provides prioritized security recommendations.
- Helps achieve compliance and reduce attack surface.
Memory trick: Endpoints need protection and constant vigilance from known weaknesses.