Administering Microsoft System Center Configuration Manager and Cloud Services Integration — Question 20

You have a deployment of System Center Configuration Manager (Current Branch).
You need to recommend a solution to manage and reduce the attack surface of applications used in your environment.
What should you include in the recommendation?

Answer options

• A. Windows Defender Exploit Guard
• B. antimalware policies
• C. Windows Defender Advanced Threat Protection (ATP) policies
• D. compliance policies

Correct answer: A

Explanation

Windows Defender Exploit Guard is specifically designed to help manage and reduce the attack surface by providing advanced protection against exploits. The other options, while important for security, focus on different aspects such as malware protection (antimalware policies), threat detection (ATP policies), or ensuring compliance (compliance policies), but do not directly address the attack surface management.