Endpoint security without switching it off

Skills you'll practise

• Diagnose when security features block legitimate work, and fix it narrowly.
• Explain why disabling protection, broad exclusions and local admin rights create risk.
• Recognise real threats among security alerts and escalate them correctly.

Course outline

1. 1.Endpoint security without switching it offVideo · 5 min
2. 2.When security gets in the wayLesson · 8 min
3. 3.UAC, local admin and real alertsLesson · 8 min
4. 4.Reading Defender and firewall state, and governing exclusionsLesson · 8 min
5. 5.Endpoint security without switching it off: knowledge checkKnowledge check · 27 questions
6. 6.Endpoint security without switching it off: practical exerciseKnowledge check · 1 question
7. 7.Defender blocks a line-of-business appScenario
8. 8.Final exam6 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Microsoft Learn: Microsoft Defender Antivirus in Windows
• Microsoft Learn: Controlled folder access
• Microsoft Learn: Microsoft Defender SmartScreen overview
• Microsoft Learn: User Account Control overview
• Microsoft Learn: Windows Firewall overview