Question 18 of 18

Your organization is using Microsoft 365 and has 500 computers. You need to protect all the computers using Microsoft Defender for Endpoint. Ten of the devices are used by executives.

Your manager explains the requirements to you as follows:

• Administrators must manually approve all remediation for any of the executives.
• All other users must have remediation performed automatically.

What should you recommend?

You'll need two machine groups. One for the automated remediation and the other for manual approval.

https://www.gitbit.org/course/ms-500/learn/Protecting-Windows-10-and-other-devices-with-Microsoft-Defender-for-Endpoint-z0qPG6v4T

https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-atp/machine-groups-windows-defender-advanced-threat-protection