Microsoft 365 Administrator — Question 308

You have a Microsoft 365 tenant -

You plan to manage incidents in the tenant by using the Microsoft Defender XDR.

Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

Answer options

• A. Azure Information Protection
• B. Microsoft Defender for Identity
• C. Azure Web Application Firewall
• D. Microsoft Sentinel

Correct answer: B

Explanation

The correct answer is B, as Microsoft Defender for Identity is specifically integrated with Microsoft Defender XDR and provides insights into identity-related incidents. The other options, while related to security, do not directly feed incident data to the Microsoft Defender portal for this purpose.