SC-200 Certification Practice Question #16

Question

You have a Microsoft 365 subscription that contains 1,000 Windows 10 devices. The devices have Microsoft Office 365 installed.
You need to mitigate the following device threats:
✑ Microsoft Excel macros that download scripts from untrusted websites
✑ Users that open executable attachments in Microsoft Outlook
✑ Outlook rules and forms exploits
What should you use?

Accepted Answer

All three threats map directly to specific ASR rules: Excel macros downloading scripts is covered by "Block all Office applications from creating child processes" / "Block Win32 API calls from Office macros," executable Outlook attachments by "Block executable content from email client and webmail," and Outlook rules/forms exploits are mitigated by the same ASR + modern-Outlook defense documented by Microsoft. ASR rules are a feature of Microsoft Defender for Endpoint, so B is the single control that addresses every listed threat. The unanimous Suggested + Most Voted + a 13-👍 comment + MS Learn all agree, hence high confidence.

More SC-200 practice questions