SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Defender Threat Protection 2

Question 1

Which Microsoft Defender product provides security posture management and threat protection specifically for cloud workloads across Azure, AWS, and GCP?

Accepted Answer

Microsoft Defender for Cloud

Answer

Microsoft Defender for Cloud provides unified security management and threat protection across multicloud environments including Azure, AWS, and GCP.

Question 2

What does Microsoft Defender for Identity use as its primary data source to detect suspicious activities?

Accepted Answer

On-premises Active Directory Domain Controller traffic

Answer

Microsoft Defender for Identity monitors on-premises Active Directory Domain Controller traffic to detect advanced threats and compromised identities.

Question 3

In Microsoft Defender for Endpoint, what is the purpose of 'Attack Surface Reduction' (ASR) rules?

Accepted Answer

To block risky behaviors commonly used by malware before an attack occurs

Answer

ASR rules proactively block behaviors commonly exploited by malware, such as Office macros launching child processes, reducing attack surface before threats execute.

Question 4

Which capability in Microsoft 365 Defender correlates alerts from multiple Defender products into a single unified incident?

Accepted Answer

Incident correlation

Answer

Microsoft 365 Defender automatically correlates alerts across Defender for Endpoint, Office 365, Identity, and Cloud Apps into unified incidents for streamlined investigation.

Question 5

What is the primary function of Microsoft Defender for Cloud Apps (formerly MCAS)?

Accepted Answer

Providing visibility and control over cloud application usage (Shadow IT)

Answer

Microsoft Defender for Cloud Apps functions as a Cloud Access Security Broker (CASB) that provides visibility into Shadow IT and controls over sanctioned and unsanctioned cloud apps.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Defender Threat Protection 2