Microsoft 365 Administrator — Question 311

You have a Microsoft 365 tenant.

You plan to manage incidents in the tenant by using the Microsoft Defender XDR.

Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

Answer options

• A. Azure Web Application Firewall
• B. Microsoft Sentinel
• C. Microsoft Defender for Cloud Apps
• D. Microsoft Purview

Correct answer: C

Explanation

The correct answer is C, Microsoft Defender for Cloud Apps, as it integrates directly with Microsoft Defender XDR to provide incident information. The other options, while related to security, do not directly contribute incident data to the Microsoft Defender portal in the same manner.