Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
On exam, December 2025
The goal was to configure accounts for attackers to exploit—which is the definition of a Honeytoken in MDI. Therefore, marking them in Entity Tags as Honeytoken accounts meets the goal.
yes - honeytoken is the user account version of a honey pot - lure attackers to exploit these (and even away from actual targets)