Microsoft 365 Administrator — Question 336

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.

From Microsoft Defender for Endpoint, you turn on the Allow or block file advanced feature.

You need to block users from downloading a file named File1.exe.

What should you use?

Answer options

• A. a suppression rule
• B. an indicator
• C. a device configuration profile

Correct answer: B

Explanation

The correct answer is B, as an indicator can be used specifically to block certain files from being downloaded. Options A and C are not suitable for this task, as suppression rules are meant for managing alerts and device configuration profiles do not directly control file downloads.