exam questions

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 348 discussion

Actual exam question from Microsoft's MS-102
Question #: 348
Topic #: 1
[All MS-102 Questions]

You have a Microsoft 365 tenant.

You plan to manage incidents in the tenant by using the Microsoft Defender XDR.

Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

  • A. Microsoft Purview
  • B. Azure Arc
  • C. Microsoft Defender for Cloud
  • D. Microsoft Defender for Identity
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
IvanDJ
1 month, 2 weeks ago
Selected Answer: D
https://learn.microsoft.com/en-us/defender-xdr/incident-queue Can be both Defender for Cloud and Defender for Identity Specify incidents that contain alerts from one or more of the following: Microsoft Defender for Identity Microsoft Defender for Cloud Apps Microsoft Defender for Endpoint Microsoft Defender XDR Microsoft Defender for Office 365 App Governance Microsoft Entra ID Protection Microsoft Data Loss Prevention Microsoft Defender for Cloud Microsoft Sentinel Microsoft Purview Insider Risk Management
upvoted 4 times
...
SummerK
1 month, 2 weeks ago
Selected Answer: C
C. Microsoft Defender for Cloud In the Microsoft Defender portal, incidents related to your Microsoft 365 tenant will be shown from Microsoft Defender for Cloud. Microsoft Defender for Cloud provides unified security management and advanced threat protection across hybrid cloud workloads, which is integrated into the Microsoft Defender portal for managing incidents and alerts.
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago