Learn Editor: Update detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md

Author: YongRhee-MSFT

defender-endpoint/detect-block-potentially-unwanted-apps-microsoft-defender-antivirus.md

@@ -175,6 +175,19 @@ Set-MpPreference -PUAProtection Disabled
 
 Setting the value for this cmdlet to `Disabled` turns off the feature if it has been enabled.
 
+#### To query the PUA status
+
+
+```powershell
+get-mpPreference | ft PUAProtection
+```
+
+|Value | Description|
+| -------- | -------- |
+| 0 | PUA Protection off (Default).  Microsoft Defender Antivirus won't protect against potentially unwanted applications.  |
+|1 |PUA Protection on. Detected items are blocked. They will show in history along with other threats.|
+|2|Audit mode. Microsoft Defender Antivirus will detect potentially unwanted applications but take no action. You can review information about the applications Windows Defender would've taken action against by searching for events created by Windows Defender in the Event Viewer.|
+
 For more information, see [Use PowerShell cmdlets to configure and run Microsoft Defender Antivirus](use-powershell-cmdlets-microsoft-defender-antivirus.md) and [Defender Antivirus cmdlets](/powershell/module/defender/index).
 
 ## Test and make sure that PUA blocking works