Microsoft 365 Administrator — Question 294

You have a Microsoft 365 tenant.

You plan to manage incidents in the tenant by using the Microsoft Defender XDR.

Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

Answer options

• A. Azure Information Protection
• B. Azure Web Application Firewall
• C. Microsoft Sentinel
• D. Microsoft Defender for Cloud Apps

Correct answer: D

Explanation

The correct answer is D, Microsoft Defender for Cloud Apps, as it integrates with Microsoft Defender XDR to provide insights on incidents. The other options, while related to Azure security, do not directly feed incident data into the Microsoft Defender portal's Incidents page.