ITForMe Beta Sign in
MD-102 MD-102 Skills measured July 24, 2026 Protect devices Runs in your browser · no setup Original practice · Review pending

Contain an endpoint policy and update regression

Separate a security control failure from an update-ring problem and restore the pilot safely.

Estimated15 min
DifficultyIntermediate
Points10
Scenario brief

A Windows pilot reports that an attack-surface reduction rule is blocking a signed line-of-business macro. A separate group cannot install the current quality update because restart deadlines conflict with maintenance hours. Use only the fictional ITForMe workflow console; its Training-prefixed cmdlets model policy state but are not production Microsoft cmdlets.

Content record

Original practice · Review pending

Mapped to Microsoft MD-102 objectives · Internal validation 2026-09-15 · Original ITForMe practice mapped to published objectives; not an official exam question. A named independent subject-matter expert has not yet verified the question and answer key.

Community review →
3.1Configure endpoint security. 3.2Manage device updates.
Show review record and official sources

Method: Mapped to MD-102 objectives 3.1 and 3.2; scenario logic and answer feedback checked against current Microsoft Learn documentation.

Current-profile check: 2026-09-30 · Next review due 2026-10-26

01

Inspect the evidence

Use only the information provided to complete the tasks.

Policy status

table
GroupPolicyCurrent state
Finance-PilotASR Office child processBlock
Finance-PilotSecurity baselineSucceeded
Warehouse-PilotUpdate ring deadline2 days
Warehouse-PilotActive hours06:00–22:00

If columns are offscreen, scroll sideways or focus the table and use arrow keys.

Approved pilot recovery state

list
  • ›The packaging owner verified the signed Finance macro. Put only the affected ASR rule in Audit for Finance-Pilot; do not disable it or create an exclusion.
  • ›Warehouse maintenance runs from 20:00 to 23:00. End active hours at 20:00 and use a four-day quality-update deadline for Warehouse-Pilot.
  • ›Run both workflow checks after the changes, inspect the resulting policies again, and do not expand either assignment beyond its pilot group.
02

Complete the response

Partial credit is available for matching, ordering, and multi-select tasks.

Changes will save automatically.
01
powershell cli

Use the bounded ITForMe PowerShell-style workflow console to inspect both pilot failures, apply only the approved pilot changes, run the two validation workflows, and inspect the final policy state.

3 pts
ADMIN-02ITForMe PowerShell-style workflow console
Browser simulator
Simulator-only Training cmdlets change disposable scenario state. They are not Microsoft Graph, Intune, or Windows PowerShell cmdlets.
Need a hint?

Inspect the fictional training objects before changing them; use Get-Help to review the bounded simulator-only cmdlets.

Show another hint

Keep every change within the requested pilot scope, run the explicit validation cmdlets, and inspect the final state.

02
matching

Match each update need to the best control.

3 pts
Need a hint?

Start with the row and choice that have the most distinctive purpose, then use that pair to narrow the rest.

Show another hint

For each remaining pair, explain the relationship in one sentence before selecting it.

03
ordering

Order the change validation steps.

4 pts

Drag the rows or use the arrow buttons to reorder.

  1. 1 Expand the validated settings in controlled rings
  2. 2 Review ASR events and update reports
  3. 3 Assign revised settings to small test groups
  4. 4 Document expected app and restart behavior
Need a hint?

Identify the prerequisite that must happen first and the verification or documentation that belongs last.

Show another hint

For the middle steps, ask what must already be true before each action can safely happen.

Ready to check your work?Unanswered tasks and matches earn no points. A partial submission is scored and saved in your history.
Persistent progress

Attempt history

Every submission is retained. Starting another attempt never replaces or unlocks the previous one.

No attempts yet

Your first submitted score and detailed answer review will appear here.

Community quality control

Question or answer look wrong?

Proposals and votes help staff prioritize review. They never change the scoring key automatically.

Full review queue →
No community corrections yet

Be the first to flag unclear wording, an answer-key issue, or a source that needs another look.

Propose a correction