You are a global administrator in a company with a Microsoft 365 subscription with Microsoft 365 E5 licenses assigned to your users. You are using Microsoft 365 Defender, and are configuring Exploit protection to protect devices from malware. You have created a set of mitigations in Powershell and will now upload the settings to Intune. 
What type of file is the mitigation configuration you must upload?

Answer options:

A.XML
B.JSON
C.YAML
D.Terraform

Correct Answer: A 
When you create and export a configuration file for exploit protection configurations, the file is exported as a XML file. Once exported you can upload the file when you create an Endpoint protection policy in intune: 

Option B is incorrect. JSON is a well know format used in for instance Azure ARM templates
Option C is incorrect. Also well known serialization language, for instance used by Ansible.
Option D is incorrect. Terraform is a tool for building infrastructure.
Reference: 
To know more about exploit protection, please refer to the link below: 

https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/enable-exploit-protection?view=o365-worldwide