Skip to main content
Answer needs confirmation
Question

You have an Azure virtual machine named VM1 that runs Windows Server.
You plan to deploy a new line-of-business (LOB) application to VM1.
You need to prevent the application from creating child processes.
What should you configure on VM1?

Proposed answer
  • A. Microsoft Defender Credential Guard
  • B. Microsoft Defender Application Control
  • C. Microsoft Defender SmartScreen
  • D. Exploit protection
Suggested answer

D. Exploit protection

Comments
Protect devices from exploits
 
Maas76

Highly Voted 1 year, 10 months ago 

Selected Answer: D

Must be D. Same question in AZ-800.

upvoted 9 times 

Josty

Highly Voted 1 year, 11 months ago 

Selected Answer: D

D Exploit protection

upvoted 5 times 

martijn_cc

Most Recent 3 months, 3 weeks ago 

Selected Answer: D

Configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus \Microsoft Defender Exploit Guard\Attack Surface Reduction\Exclude files and paths from Attack Surface Reduction Rules

upvoted 1 times 

Migmol

1 year ago 

D is correct

upvoted 1 times 

Nigromante

1 year, 1 month ago 

I Agree it should be D

upvoted 1 times 

raulgar

1 year, 2 months ago 

Selected Answer: D

D, exploit protection

upvoted 1 times 

syu31svc

1 year, 3 months ago 

Selected Answer: D

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide "Prevents an app from creating child processes." D is 100% correct

upvoted 1 times 

nefaxto

1 year, 5 months ago 

Selected Answer: D

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide#powershell-reference-table

upvoted 3 times 

Leocan

1 year, 7 months ago 

Selected Answer: D

D is correct.

upvoted 2 times 

JohnO1971

1 year, 8 months ago 

Selected Answer: D

Has to be D

upvoted 3 times 

GoforIT21

1 year, 10 months ago 

Selected Answer: D

Anything apart from D doesn't make much sense here.

upvoted 4 times 

Skylark_

1 year, 10 months ago 

Selected Answer: D

Exploit protection

upvoted 4 times 

alexandrasexy

1 year, 11 months ago 

It should be D, Exploit Protection

upvoted 3 times 

Roger_Rabbit

1 year, 11 months ago 

Thinking also Exploit Protection https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/customize-exploit-protection?view=o365-worldwide Don't allow child processes Prevents an app from creating child processes. App-level only Yes

upvoted 4 times 

DPRamone

1 year, 11 months ago 

I think this should be D, Exploit Protection

upvoted 3 times