Microsoft 365 Administrator — Question 191

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint.

Defender for Endpoint has tamper protection enabled.

You have a device named Device1 that is onboarded to Defender for Endpoint.

You need to configure antivirus and real-time protection for Device1.

What should you do in the Microsoft Defender portal?

Answer options

• A. Initiate a live response session.
• B. Create a device group.
• C. Enable troubleshooting mode.
• D. Isolate Device1.

Correct answer: C

Explanation

The correct answer is C, as enabling troubleshooting mode allows you to configure antivirus settings and real-time protection on the device. The other options do not directly address the need to configure these settings: initiating a live response does not change configurations, creating a device group is for organization rather than configuration, and isolating Device1 would prevent it from being managed effectively.