Question

Contoso wants to apply Microsoft's recommended hardening configuration for Microsoft Defender for Endpoint across all corporate Windows 11 devices with minimal manual effort. The security team wants a preconfigured template maintained by Microsoft that they can assign and later review as new versions are released. Which Intune capability should they use?

Accepted Answer

Deploy the Microsoft Defender for Endpoint security baseline from Endpoint security > Security baselines

Answer

Create a custom device configuration profile using OMA-URI settings for Defender

Answer

Create an antivirus endpoint security policy and manually enable each recommended setting

Answer

Import a Group Policy backup using the Group Policy analytics migration tool