1- # ## YamlMime:ModuleUnit
2- uid : learn.wwl.configure-manage-automation-microsoft-defender-for-endpoint.knowledge-check
3- title : Knowledge check
4- metadata :
5- title : Knowledge check
6- description : " Knowledge check"
7- ms.date : 11/28/2023
8- author : wwlpublish
9- ms.author : bneeb
10- ms.topic : unit
11- azureSandbox : false
12- labModal : false
13- durationInMinutes : 3
14- content : |
15- [!include[](includes/6-knowledge-check.md)]
16- quiz :
17- title : " Check your knowledge"
18- questions :
19- - content : " Which is a valid remediation level?"
20- choices :
21- - content : " Semi - require approval for any remediation"
22- isCorrect : true
23- explanation : " Correct. This is a valid remediation level."
24- - content : " Semi - user accounts only"
25- isCorrect : false
26- explanation : " Incorrect. This isn't a valid remediation level."
27- - content : " Semi - files only"
28- isCorrect : false
29- explanation : " Incorrect. This isn't a valid remediation level."
30- - content : " A security operations analyst needs to exclude a custom executable file c:\\ myapp\\ myapp.exe, which exclusion type should they use?"
31- choices :
32- - content : " File"
33- isCorrect : true
34- explanation : " Correct. File will exclude this specific file from automation"
35- - content : " Extension"
36- isCorrect : false
37- explanation : " Incorrect. Extension would exclude all files with the extension."
38- - content : " Folder"
39- isCorrect : false
40- explanation : " Incorrect. Folder would exclude all files in a folder."
41- - content : " In advanced features, which setting should be turned on to block files even if a third-party antivirus is used?"
42- choices :
43- - content : " Enable EDR in block mode"
44- isCorrect : true
45- explanation : " Correct. EDR in block mode is used with third party antivirus"
46- - content : " Allow or block file"
47- isCorrect : false
48- explanation : " Incorrect. The feature requires Defender antivirus"
49- - content : " Automated Investigation"
50- isCorrect : false
51- explanation : " Incorrect. Automated investigations aren't specific to blocking files."
1+ # ## YamlMime:ModuleUnit
2+ uid : learn.wwl.configure-manage-automation-microsoft-defender-for-endpoint.knowledge-check
3+ title : Knowledge check
4+ metadata :
5+ title : Knowledge check
6+ description : " Knowledge check"
7+ ms.date : 11/28/2023
8+ author : wwlpublish
9+ ms.author : kelawson
10+ ms.topic : unit
11+ azureSandbox : false
12+ labModal : false
13+ durationInMinutes : 3
14+ content : |
15+ [!include[](includes/6-knowledge-check.md)]
16+ quiz :
17+ title : " Check your knowledge"
18+ questions :
19+ - content : " Which is a valid remediation level?"
20+ choices :
21+ - content : " Semi - require approval for any remediation"
22+ isCorrect : true
23+ explanation : " Correct. This is a valid remediation level."
24+ - content : " Semi - user accounts only"
25+ isCorrect : false
26+ explanation : " Incorrect. This isn't a valid remediation level."
27+ - content : " Semi - files only"
28+ isCorrect : false
29+ explanation : " Incorrect. This isn't a valid remediation level."
30+ - content : " A security operations analyst needs to exclude a custom executable file c:\\ myapp\\ myapp.exe, which exclusion type should they use?"
31+ choices :
32+ - content : " File"
33+ isCorrect : true
34+ explanation : " Correct. File will exclude this specific file from automation"
35+ - content : " Extension"
36+ isCorrect : false
37+ explanation : " Incorrect. Extension would exclude all files with the extension."
38+ - content : " Folder"
39+ isCorrect : false
40+ explanation : " Incorrect. Folder would exclude all files in a folder."
41+ - content : " In advanced features, which setting should be turned on to block files even if a third-party antivirus is used?"
42+ choices :
43+ - content : " Enable EDR in block mode"
44+ isCorrect : true
45+ explanation : " Correct. EDR in block mode is used with third party antivirus"
46+ - content : " Allow or block file"
47+ isCorrect : false
48+ explanation : " Incorrect. The feature requires Defender antivirus"
49+ - content : " Automated Investigation"
50+ isCorrect : false
51+ explanation : " Incorrect. Automated investigations aren't specific to blocking files."
0 commit comments