SC-100 Practice Question 3981

Exam: SC-100
Domain: Design security solutions for infrastructure
Difficulty: easy
An architect is designing an endpoint security baseline for Windows 11. You need to ensure that tampering with Defender Antivirus settings, turning off real-time protection, or killing services via registry keys is blocked. What must you enable?

Answer Options

A
Tamper Protection in Microsoft Defender
B
BitLocker Volume Lock
C
Intune device wipe command
D
Windows Firewall inbound rules

Correct Answer

A: Tamper Protection in Microsoft Defender

Explanation

Tamper Protection locks Microsoft Defender Antivirus and EDR configurations in place, preventing local administrators, malware, or PowerShell commands from disabling protection.
Reference: https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/prevent-changes-to-security-settings-with-tamper-protection

Related Practice Questions

SC-100 Practice Question 3854SC-100 Practice Question 3855SC-100 Practice Question 3856