Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
D is the best answer. However, if connected, Sentinel will also.
"Alerts from different Microsoft security solutions like Microsoft Defender for Endpoint, Defender for Office 365, Microsoft Sentinel, Defender for Cloud, Defender for Identity, Defender for Cloud Apps, Defender XDR, App Governance, Microsoft Entra ID Protection, and Microsoft Data Loss Prevention appear here." https://learn.microsoft.com/en-us/defender-xdr/investigate-alerts?tabs=settings
The correct answer is D. Microsoft Defender for Identity. Microsoft Defender XDR consolidates data from various Microsoft Defender services, and Microsoft Defender for Identity (formerly Azure Advanced Threat Protection) provides identity-based threat detection. Incidents related to identity threats will appear in the Incidents page of the Microsoft 365 Defender portal. Microsoft Sentinel and Defender for Cloud serve broader purposes outside the Microsoft 365 Defender portal, while Azure Web Application Firewall focuses on web application protection.