AB-650 Practice Question 3144
Exam: AB-650
Domain: Govern and secure Microsoft 365 tenants and workloads
Difficulty: medium
What is the function of Attack Surface Reduction (ASR) rules in Microsoft Defender for Endpoint?
Answer Options
A
Blocking typical malware behaviors and attack vectors on endpoints
B
Compressing local hard drive volume capacity
C
Routing web browsing traffic through satellite relays
D
Managing Exchange Online shared mailbox quotas
Correct Answer
A: Blocking typical malware behaviors and attack vectors on endpoints
Explanation
ASR rules block typical malware attack vectors, such as Office apps creating child processes, credential stealing from LSASS, and malicious scripts launching executables.