Check Defender status and run a quick scan
On a Windows 11 workstation, use Get-MpComputerStatus to confirm that Microsoft Defender Antivirus and real-time protection are enabled, then start a quick scan with Start-MpScan. On a real workstation, check QuickScanEndTime after the silent command returns to confirm when the scan completed. This lab uses a canned console; it does not scan the learner's machine. Practice, not exam questions. Not a score predictor. Nothing here is taken from any exam.
Steps
- 1
Run Get-MpComputerStatus and confirm AntivirusEnabled and RealTimeProtectionEnabled are True; note AntivirusSignatureVersion and the current QuickScanEndTime.
- 2
Run Start-MpScan -ScanType QuickScan. Normal success has no persistent output; on a real workstation, re-read Get-MpComputerStatus after completion and check QuickScanEndTime.
What you should see
The status block shows AntivirusEnabled and RealTimeProtectionEnabled as True. Starting the quick scan prints no persistent success text and returns control to the prompt.