Microsoft Security Operations Analyst — Question 2
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring Microsoft Defender for Identity integration with Active Directory.
From the Microsoft Defender for identity portal, you need to configure several accounts for attackers to exploit.
Solution: You add the accounts to an Active Directory group and add the group as a Sensitive group.
Does this meet the goal?
Answer options
- A. Yes
- B. No
Correct answer: B
Explanation
The proposed solution does not meet the goal because simply adding accounts to an Active Directory group and marking the group as Sensitive does not inherently configure the accounts for exploitation in a meaningful way. Additional steps are required to simulate the conditions for attackers effectively.