Microsoft 365 Mobility and Security (legacy) — Question 161

You have a Microsoft 365 tenant.
You plan to manage incidents in the tenant by using the Microsoft 365 Defender.
Which Microsoft service source will appear on the Incidents page of the Microsoft 365 Defender portal?

Answer options

• A. Microsoft Sentinel
• B. Azure Web Application Firewall
• C. Microsoft Defender for Cloud
• D. Microsoft Defender for Identity

Correct answer: D

Explanation

The correct answer is D, Microsoft Defender for Identity, as it specifically integrates with Microsoft 365 Defender to provide insights into identity-related incidents. The other options, while they are part of Microsoft's security offerings, do not feed into the Incidents page of the Microsoft 365 Defender portal.