Microsoft 365 Administrator — Question 260

You have a Microsoft 365 tenant.

You plan to manage incidents in the tenant by using the Microsoft Defender XDR.

Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

Answer options

• A. Microsoft Purview
• B. Azure Arc
• C. Microsoft Defender for Cloud
• D. Microsoft Defender for Identity

Correct answer: D

Explanation

The correct answer is D, Microsoft Defender for Identity, as it specifically integrates with Microsoft Defender XDR to provide insights into identity-related incidents. The other options, while related to Microsoft services, do not directly contribute to the incident management in the same way as Microsoft Defender for Identity does.