Microsoft 365 Administrator — Question 78

You have a Microsoft 365 tenant.
You plan to manage incidents in the tenant by using the Microsoft 365 Defender.
Which Microsoft service source will appear on the Incidents page of the Microsoft 365 Defender portal?

Answer options

• A. Microsoft Sentinel
• B. Microsoft Defender for Cloud
• C. Azure Arc
• D. Microsoft Defender for Identity

Correct answer: D

Explanation

The correct answer is D, Microsoft Defender for Identity, as it is specifically designed to provide insights and alerts regarding identity-related incidents. The other options, while part of the Microsoft ecosystem, do not directly contribute incidents to the Microsoft 365 Defender portal's Incidents page.