MDFT Academy Quizzes

What should you configure to prevent suspicious scripts from running?

MDFT Academy has a Microsoft 365 subscription that includes Microsoft Intune. You need to implement a Microsoft Defender for Endpoint solution that meets the following requirements:

Enforces compliance for Defender for Endpoint by using Conditional Access
Prevents suspicious scripts from running on devices

What should you configure to prevent suspicious scripts from running?

Choose the correct answer from the options below.

Explanations for each answer:

A device restriction policy is incorrect. Device restriction policies are used to configure device settings, but they do not include specific controls for script execution.
A security baseline is incorrect. While security baselines include some security controls, they are not the most direct way to prevent suspicious scripts from running.
An attack surface reduction (ASR) rule is correct. Attack surface reduction (ASR) rules are designed specifically to prevent malicious and suspicious scripts from running on devices. They can block scripts, executables, and other behaviors that are commonly used in malware attacks.
An Intune connection is incorrect. While an Intune connection is important for managing security policies, it is not specifically what prevents suspicious scripts from running. ASR rules are the feature that provides this functionality.

Exam Preparation Quiz

What should you configure to prevent suspicious scripts from running?