DRAG DROP You have a Microsoft 365 subscription. The subscription contains 500 Windows 11 devices that are onboarded to Microsoft Defender for Endpoint. You need to perform the following actions in Microsoft Defender XDR:
• For your company’s finance department, populate random endpoints with fake cached credentials.
• Ensure that an incident is created in Microsoft Defender XDR if an attacker attempts to use the fake cached credentials. The solution must ensure that the fake cached credentials are planted only on endpoints of the finance department. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. NOTE: More than one order of answer choices is correct. You will receive credit for any of the correct orders you select.
Select one answer.
Purchase Full Access to view answer options & explanation
The first 125 questions in this bank are completely free. Unlock Full Access on the exam page to view all answer choices, verified answers, explanations, and community discussions for all 415 questions.
