Microsoft 365 Administrator — Question 287

You have a Microsoft 365 E5 subscription and use Microsoft Defender for Endpoint. The subscription contains Windows 11 devices.

You need to recommend a solution to prevent antivirus and real-time protection on the devices from being modified or disabled.

What should you include in the recommendation?

Answer options

• A. Enforcement scope
• B. tamper protection
• C. Auto remediation
• D. endpoint detection and response (EDR) in block mode
• E. Live Response

Correct answer: B

Explanation

The correct answer is B, tamper protection, which specifically safeguards antivirus settings from being changed or disabled. The other options do not address the need to lock down these settings; for instance, Enforcement scope (A) relates to compliance, while Auto remediation (C) focuses on fixing issues after they occur, and EDR in block mode (D) and Live Response (E) offer security insights but do not prevent modifications.