Managing Modern Desktops (legacy) — Question 6

You have computers that run Windows 10 and are managed by using Microsoft Intune.
Users store their files in a folder named D:\Folder1.
You need to ensure that only a trusted list of applications is granted write access to D:\Folder1.
What should you configure in the device configuration profile?

Answer options

• A. Microsoft Defender SmartScreen
• B. Microsoft Defender Exploit Guard
• C. Microsoft Defender Application Guard
• D. Microsoft Defender Application Control

Correct answer: B

Explanation

The correct choice is B, Microsoft Defender Exploit Guard, which helps in controlling which applications can write to certain locations. The other options, while related to security, do not specifically manage write access to folders in the same way that Exploit Guard does.