HOTSPOT
You have Windows 8.1 Enterprise client computers. All of the computers are managed by using Microsoft
System Center 2012 Configuration Manager.

You enable Microsoft System Center 2012 Endpoint Protection on the computers.
You need to ensure that Endpoint Protection automatically downloads the latest available malware definition
updates when unidentified malware is detected on the computers.
What should you configure? (To answer, select the appropriate option in the answer area.)

Answer:

Explanation:
Advanced. Use these settings to configure actions such as system restore point creation, client interface
visibility, quarantined item deletion period, allowing users to exclude specific folders, and scan and definition
update schedule randomization.
Note: Definition updates. Configure how often the client checks for definition updates. Also allows you to
specify the location of definition update files.

Endpoint Protection installs its own client in addition to the Configuration Manager client. The Endpoint
Protection client has the following capabilities:
Malware and Spyware detection and remediation.
Rootkit detection and remediation.
Critical vulnerability assessment and automatic definition and engine updates.
Network vulnerability detection via Network Inspection System.
Integration with Microsoft Active Protection Services to report malware to Microsoft. When you join this
service, the Endpoint Protection client can download the latest definitions from the Malware Protection
Center when unidentified malware is detected on a computer.
http://blogs.technet.com/b/justin_gao/archive/2012/04/22/system-center-2012-configuration-managerrtmendpoint-protection-deployment.aspx