Which two actions should you perform?

You have an Azure AD tenant and 100 Windows 10 devices that are Azure AD joined and managed by using Microsoft Intune.

You need to configure Microsoft Defender Firewall and Microsoft Defender Antivirus on the devices.

The solution must minimize administrative effort.

Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . To configure Microsoft Defender Antivirus, create a Group Policy Object (GPO) and configure the Windows Defender Antivirus settings.
B . To configure Microsoft Defender Firewall, create a device configuration profile and configure the Device restrictions settings.
C . To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Endpoint protection settings.
D . To configure Microsoft Defender Antivirus, create a device configuration profile and configure the Device restrictions settings.
E . To configure Microsoft Defender Firewall, create a device configuration profile and configure the Endpoint protection settings.
F . To configure Microsoft Defender Firewall, create a Group Policy Object (GPO) and configure Windows Defender Firewall with Advanced Security.

View Answer

Answer: CE

Explanation:

To configure Microsoft Defender Firewall and Microsoft Defender Antivirus on Azure AD joined devices that are managed by Intune, you need to create a device configuration profile and configure the Endpoint protection settings. You can use this profile to configure various settings for firewall and antivirus protection on the devices.

Reference: https://docs.microsoft.com/en-us/mem/intune/protect/endpoint-protection-windows-10