MD-102 Protect devices Practice Question
You manage Windows 10 devices with Microsoft Intune. A user reports that a device has a red shield icon in the Windows Security Center, indicating tamper protection is off. You need to re-enable tamper protection on the device using Intune. Which profile type should you configure?
⚠ Common exam trap
Many candidates confuse the 'Security baseline' (which applies many security settings but not tamper protection) with the 'Endpoint protection profile' (which specifically manages Defender features like tamper protection), leading them to select Option C incorrectly.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Endpoint protection profile (Microsoft Defender Antivirus)
Tamper protection is a Microsoft Defender Antivirus setting that prevents unauthorized changes to security features. In Intune, this setting is configured under the 'Endpoint protection profile' using the 'Microsoft Defender Antivirus' template, specifically via the 'Enable tamper protection to prevent Microsoft Defender being disabled' toggle. This profile type directly manages Defender settings, including tamper protection, and applies them to enrolled Windows 10 devices.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Device configuration profile (settings catalog)
Why it's wrong here
Tamper protection is a Windows Security setting delivered through the Endpoint Protection profile category, not the settings catalog, which exposes only a subset of Defender configuration. Settings catalog is chosen when a specific granular setting exists there but is absent from the endpoint security templates.
- ✓
Endpoint protection profile (Microsoft Defender Antivirus)
Why this is correct
Endpoint protection profiles for Microsoft Defender Antivirus expose the tamper protection toggle directly, letting Intune push the setting to the device without a script. This satisfies the requirement to re-enable tamper protection remotely, since Defender Antivirus configuration is the only Intune profile type that carries that specific setting.
- ✗
Security baseline (Windows 10/11)
Why it's wrong here
Security baselines set Microsoft's recommended configuration defaults, including some Defender settings, but tamper protection is not a baseline-controlled setting and baseline assignment cannot toggle it on. Baselines suit standardising broad OS hardening across device groups, not remediating a specific disabled Defender feature.
- ✗
Compliance policy
Why it's wrong here
Compliance policies only evaluate and report device state against conditions, marking devices non-compliant; they never write settings to a device. Tamper protection cannot be re-enabled by assessment alone. Compliance policies suit conditional access gating, not remediating a disabled security feature.
Go deeper
Related to this question
Learn chapter
Securing Devices with Endpoint Security Policies
Key term
Intune
Microsoft Intune is a cloud-based service that helps organizations manage their users' devices and applications, ensuring security and compliance without needing to own or control the physical hardware.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every MD-102 question from scratch — 556 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MD-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MD-102 exam.