Microsoft 365 Administrator — Question 173

You have a Microsoft 365 tenant.

You plan to manage incidents in the tenant by using the Microsoft Defender XDR.

Which Microsoft service source will appear on the Incidents page of the Microsoft 365 Defender portal?

Answer options

• A. Microsoft Sentinel
• B. Microsoft Defender for Cloud
• C. Azure Web Application Firewall
• D. Microsoft Defender for Identity

Correct answer: D

Explanation

The correct answer is D, Microsoft Defender for Identity, as it is specifically designed to provide incident management capabilities within the Microsoft 365 Defender portal. The other options, while related to security, do not directly contribute incident information to the Defender portal's Incidents page.