Question

Your organization uses Microsoft Defender for Endpoint on all Windows devices. The security team wants to prevent users on managed devices from accessing websites categorized as gambling and adult content, and they want reporting on blocked attempts. They do not want to deploy a third-party proxy or firewall rule. What should you configure in the Microsoft Defender portal?

Accepted Answer

Create a Web content filtering policy under Settings > Endpoints and assign it to the appropriate device groups

Answer

Create an attack surface reduction (ASR) rule to block content by URL category

Answer

Configure a custom indicator with an allow/block action for each website URL

Answer

Create a Conditional Access policy that blocks access based on network location