Which of the following are TURE with regards to making use of Endpoint Protection in Configuration Manager?

You work as a senior administrator at ABC.com. The ABC.com network consists of a single
domain named ABC.com. ABC.com makes use of System Center 2012 Configuration Manager in
their environment.
You are running a training exercise for ABC.com’s administrators. You are currently discussing the
use of Endpoint Protection in Configuration Manager.
Which of the following are TURE with regards to making use of Endpoint Protection in
Configuration Manager? (Choose all that apply.)

A.
You are allowed to configure antimalware policies and Windows Firewall settings for selected
groups of computers via custom antimalware policies and client settings.

B.
You are only allowed to use Windows Update to download the latest antimalware definition files
to keep client workstations up-to-date.

C.
You are allowed to make use of Configuration Manager software updates to download the most
recent antimalware definition files to keep client workstations up-to-date.

D.
You are not allowed to send email notifications to administrative users to inform them when
malware is detected on client workstations.