Installation, Storage, and Compute with Windows Server 2016 — Question 253

You have a server named Server1 that runs Windows Server 2016. Windows Defender is enabled on Server1.
Server1 runs an application named App1 that stores various types of files in Microsoft OneDrive for Business, MicrosoftOneDrive, and Microsoft SharePoint
Online. App1 also interacts with several local services.
You need to prevent Windows Defender from scanning any files opened by App1.
What should you do on Server1?

Answer options

• A. From the Windows Defender settings, configure a file exclusion.
• B. Run the New-CiPolicy cmdlet.
• C. Modify the real-time protection settings in Windows Defender.
• D. From the Windows Defender settings, configure a process exclusion.
• E. Run the Set-ExecutionPolicy cmdlet.
• F. Run the New-AppLockerPolicy cmdlet.

Correct answer: D

Explanation

The correct answer is D because configuring a process exclusion in Windows Defender will prevent it from scanning the processes associated with App1, thereby allowing the application to operate without interference. Options A and C do not specifically target the process level, while B, E, and F are unrelated to Windows Defender's scanning capabilities.