- 4 views
Exam
Answer needs confirmation
Question
You have an Azure virtual machine named VM1.
You enable Microsoft Defender SmartScreen on VM1.
You need to ensure that the SmartScreen messages displayed to users are logged.
What should you do?
Proposed answer
- A. From a command prompt, run WinRM quickconfig.
- B. From the local Group Policy, modify the Advanced Audit Policy Configuration settings.
- C. From Event Viewer, enable the Debug log.
- D. From the Windows Security app, configure the Virus & threat protection settings.
Suggested answer
- C. From Event Viewer, enable the Debug log.
xxxxx85xx
Highly Voted 2 years, 8 months ago
Correct Answer "Microsoft Defender SmartScreen events appear in the Microsoft-Windows-SmartScreen/Debug log, in the Event Viewer. Windows event log for SmartScreen is disabled by default, users can use Event Viewer UI to enable the log or use the command line to enable it: wevtutil sl Microsoft-Windows-SmartScreen/Debug /e:true"
upvoted 14 times
SeattleJoe
Most Recent 2 months, 2 weeks ago
Selected Answer: C
Do not assume anything with Microsoft. They didn't mention a domain. C is the right answer.
upvoted 1 times
starseed
3 months ago
correct answer is B---->To capture SmartScreen actions in the logs, you'll need to enable auditing. In the Group Policy Editor.
upvoted 1 times
RickySmith
10 months, 2 weeks ago
Selected Answer: C
C https://yongrhee.wordpress.com/2020/09/01/deploying-windows-defender-smartscreen-via-mem-intune-endpoint-microsoft-com-best-practices/
upvoted 1 times
FormaPlom
1 year, 1 month ago
Selected Answer: B
If this option it has all users and all computers, I think that the correct answer is B because the administration for this si more easier
upvoted 1 times
JacR
1 year, 4 months ago
Selected Answer: B
I think it's B as per https://learn.microsoft.com/en-us/windows/security/operating-system-security/virus-and-threat-protection/microsoft-defender-smartscreen/available-settings Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer\Configure Windows Defender SmartScreen "when enabling this feature, you must also pick whether Microsoft Defender SmartScreen should Warn your employees or Warn and prevent bypassing the message"
upvoted 2 times
syu31svc
1 year, 7 months ago
Selected Answer: C
Open the Event Viewer by typing "eventvwr.msc" in the Run dialog box or the Start menu search box and press Enter. In the left-hand pane, right-click "Custom Views" and select "Create Custom View". In the "Create Custom View" dialog box, select "By log" and choose "Microsoft-Windows-SmartScreen/Debug" from the drop-down list. Click "OK" to create the custom view. You can now view SmartScreen events by expanding the custom view in the left-hand pane of the Event Viewer. C is correct
upvoted 4 times