Microsoft Endpoint Administrator — Question 43

You have a Microsoft 365 E5 subscription. The subscription contains 25 computers that run Windows 11 and are enrolled in Microsoft Intune.
You need to onboard the devices to Microsoft Defender for Endpoint.
What should you create in the Microsoft Intune admin center?

Answer options

• A. an attack surface reduction (ASR) policy
• B. a security baseline
• C. an endpoint detection and response (EDR) policy
• D. an account protection policy
• E. an antivirus policy

Correct answer: C

Explanation

The correct answer is C, as an endpoint detection and response (EDR) policy is specifically designed to integrate devices with Microsoft Defender for Endpoint, enabling advanced threat detection and response capabilities. The other options, while important for security, do not fulfill the requirement for onboarding to Microsoft Defender for Endpoint.