Microsoft 365 Administrator — Question 202

You have a Microsoft 365 subscription that includes Microsoft Intune and Microsoft Defender XDR.

All users have devices that run Windows 11.

From the Microsoft Defender portal, you review the Microsoft Secure Score recommendations. One of the top recommendations is to block all Microsoft Office applications from creating child processes.

You need to increase the secure score by addressing the recommendation.

What should you do?

Answer options

• A. Select Safe Documents for Office clients.
• B. Create a policy for Office applications.
• C. Configure an endpoint detection and response (EDR) policy.
• D. Create an attack surface reduction (ASR) policy.

Correct answer: D

Explanation

The correct answer is D, as creating an attack surface reduction (ASR) policy directly addresses the recommendation to block Office applications from creating child processes, thus improving the secure score. Options A and B do not specifically tackle the recommendation, while option C pertains to EDR which is not focused on managing Office application behavior.