SC-100 Certification Practice Question #189

Question

You have a Microsoft 365 E5 subscription. The subscription contains 500 devices that run Windows 11 Pro and are enrolled in Microsoft Intune.

You need to evaluate the use of Microsoft Defender Vulnerability Management to provide recommended configuration changes for the devices.

Which Endpoint security settings should you use to review the recommended changes?

Accepted Answer

Microsoft Defender Vulnerability Management's recommended configuration changes are pushed to Intune through the remediation-request workflow and appear under Endpoint security → Security tasks, where Intune admins review, accept, and deploy the recommended configuration or policy. MS Learn explicitly ties Security tasks to Defender-for-Endpoint-identified vulnerabilities and configuration remediations, matching the scenario of reviewing MDVM recommended changes. The other Endpoint security nodes (Attack surface reduction, EDR, Device compliance) configure their own policy types and are not the surface for MDVM recommendations. Suggested Answer, a strong 7-vote Most Voted, a 3 👍 confirmation, two further supporting comments, and MS Learn all agree on A.

More SC-100 practice questions