You exported a tested Exploit protection baseline to \\fileshare\EPBase.xml. On server APP1, the legacy process C:\Program Files\Legacy\AppLegacy.exe crashes unless Export Address Filtering (EAF) is disabled for that process. You must import the baseline and disable EAF only for AppLegacy.exe. Which two PowerShell commands should you run on APP1?
Choose an answer
Tap an option to check your answer.
Correct answer: Set-ProcessMitigation -PolicyFilePath \\fileshare\EPBase.xml, Set-ProcessMitigation -Name AppLegacy.exe -Disable EAF.
Why this is the answer
The Set-ProcessMitigation -PolicyFilePath \\fileshare\EPBase.xml command imports the entire Exploit protection baseline from the specified XML file, applying its configurations to the server. The Set-ProcessMitigation -Name AppLegacy.exe -Disable EAF command then specifically targets the AppLegacy.exe process and disables the Export Address Filtering (EAF) mitigation for it, addressing the crashing issue. Combining these two commands ensures the baseline is applied and the necessary exception is made. Import-ProcessMitigation is not a valid cmdlet. Set-ProcessMitigation -System -Disable EAF would disable EAF system-wide, which is not the desired granular control. Get-ProcessMitigation is used for viewing, not applying, configurations.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed