MS-102 Practice Question 3075
Exam: MS-102
Domain: Manage security and threats using Microsoft Defender XDR
Difficulty: medium
You need to prevent malicious macro code from running in Office documents downloaded from the Internet across all Windows workstations. Which Attack Surface Reduction (ASR) rule enforces this?
Answer Options
A
Attack Surface Reduction rule: Block Office apps from creating child processes
B
Enable anonymous guest links in SharePoint
C
Assign Global Reader to all workstation users
D
Configure POP3 mailbox settings in Exchange Online
Correct Answer
A: Attack Surface Reduction rule: Block Office apps from creating child processes
Explanation
The ASR rule "Block Office applications from creating child processes" or "Block JavaScript or VBScript from launching downloaded executable content" stops macro-based delivery vectors.