SC-200 Certification Practice Question #186

Question

You have a Microsoft 365 subscription that uses Microsoft Defender XDR. The subscription contains 500 devices that are joined to Microsoft Entra, are in the Microsoft Defender for Endpoint default device group, and are managed by using Microsoft Intune.

You need to implement Microsoft Defender Vulnerability Management. The solution must minimize the administrative effort.

What should you do first in the Microsoft Defender portal?

Accepted Answer

The devices are Entra-joined and Intune-managed, so the solution must bridge Defender Vulnerability Management remediation to Intune with minimal effort. MS Learn lists enabling the Microsoft Intune connection (Settings > Endpoints > Advanced features) as the prerequisite that lets Defender create Intune security tasks for remediation; without it the remediation-to-Intune option doesn't appear. Configuration management enforcement scope (A) and auto remediation (B) aren't the first step, and Live Response (D) is an unrelated endpoint response feature.

More SC-200 practice questions