Exam MS-101 topic 2 question 108 discussion

correct. Alerts from different Microsoft security solutions like; Microsoft Defender for Office 365 Microsoft Defender for Endpoint da or ed for custom detection alerts Microsoft Defender for Identity aa{GUID} Microsoft Defender for Cloud Apps ca{GUID}

D is correct: "The source of the alerts (Microsoft Defender for Identity...)." The Incidents page in Microsoft 365 Defender displays incidents from various Microsoft security services, including Microsoft Defender for Identity, Microsoft Defender for Endpoint, and Microsoft Cloud App Security. Therefore, Microsoft Defender for Identity will appear as a service source on the Incidents page of the Microsoft 365 Defender portal Source: https://learn.microsoft.com/en-us/microsoft-365/security/defender/investigate-incidents?view=o365-worldwide

Answer correct is D

https://learn.microsoft.com/en-us/training/modules/introduction-to-microsoft-365-threat-intelligence/3-explore-alert-policies-microsoft-365