MS-102 Question 121

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C1

  C. Basic Discovery Explanation: Basic discovery mode in Microsoft Defender for Endpoint ensures that devices only discover other devices they communicate with directly (such as via SMB, RDP, or other direct connections). It prevents network polling for device discovery, which is what you want to avoid. Standard discovery would allow broader network polling, and device discovery exclusions are used to exclude specific devices or subnets, not to change the discovery mode. Network assessment jobs are for vulnerability and exposure assessments, not for controlling device discovery behavior.

• Chose B1

  B. device discovery exclusions Here's why: Standard discovery and basic discovery are both discovery methods that allow devices to poll the network for other devices. This is not what you want to prevent. A network assessment job is used to assess the security posture of your network. It doesn't directly address the issue of preventing onboarded devices from polling the network. Device discovery exclusions allow you to specify devices that should be excluded from network-wide device discovery. By excluding onboarded devices from this discovery method, you can prevent them from polling the network for other devices while still allowing them to discover devices with which they communicate directly.

• Chose C3

  "In the Device Discovery settings, select Basic Device Discovery mode. This mode restricts the devices from polling the network to discover other devices. Instead, it allows devices to discover only those with which they directly communicate." Explanation: Standard Discovery: This mode might allow for broader network polling which doesn’t meet the requirement of limiting discovery to direct communications only. Device Discovery Exclusions: These settings are typically used to exclude specific devices or IP ranges from being discovered but don't inherently restrict onboarded devices from polling the network for discovery. ChatGPT 4-o says C