How to deploy this Exploit protection policy and how it works across M365 tenant and devices?

Never done this but looks like you can capture current settings with powershell and create your own xml. This is not the primary security mechanism I would use to secure endpoints :)

https://video2.skills-academy.com/en-us/microsoft-365/security/defender-endpoint/enable-exploit-protection?view=o365-worldwide#powershell

@Vinod Survase, Thanks for posting in Q&A. Exploit protection helps protect devices from malware that use exploits to spread and infect. It consists of a number of mitigations that can be applied at either the operating system level, or at the individual app level.

You can configure exploit protection to your desired state then export the configuration file with xml format.

https://video2.skills-academy.com/en-us/microsoft-365/security/defender-endpoint/import-export-exploit-protection-emet-xml?view=o365-worldwide

After that, you can configure the Exploit protection policy with the above xml to deploy it to the devices you want.

Hope the above information can help.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.