Describe Threat Protection with Microsoft Defender XDR SC-900 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which type of data is typically included in Microsoft Defender Threat Intelligence?

   • AIndicators of compromise (IOCs) such as malicious IP addresses and domains
   • BNetwork performance metrics
   • CEmail content
   • DUser login history
   Reveal Solution Discussion Select an answer first
2. 17expert · hard

   A company's security team wants to protect against phishing emails that use URL spoofing. They have already enabled Safe Links, but some malicious URLs are still being clicked. They want to add a layer of protection that blocks access to known malicious URLs at the network level, even if the URL is clicked from a non-email source. What should they do?

   • AEnable app governance in Microsoft Defender for Cloud Apps
   • BEnable user risk policies in Microsoft Defender for Identity
   • CEnable network protection in Microsoft Defender for Endpoint
   • DEnable Safe Attachments in Microsoft Defender for Office 365
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the main objective of Microsoft Defender Vulnerability Management?

   • ATo continuously identify, assess, and remediate vulnerabilities across assets
   • BTo block malicious websites in the browser
   • CTo manage firewall rules on endpoints
   • DTo monitor user behavior for insider threats
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A company has a fleet of Windows servers that are not enrolled in Microsoft Defender for Endpoint. The security team wants to identify vulnerabilities on these servers and also enable endpoint detection and response. They have a limited budget and want to use a single Microsoft Defender XDR solution. What should they do?

   • ADeploy Microsoft Defender Vulnerability Management separately without Defender for Endpoint
   • BUse Microsoft Defender Threat Intelligence to identify vulnerabilities on the servers
   • CEnroll the servers in Microsoft Defender for Endpoint, which includes vulnerability management capabilities
   • DUse Microsoft Defender for Cloud Apps to scan the servers for vulnerabilities
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of Microsoft Defender Threat Intelligence?

   • ATo manage email quarantine settings
   • BTo provide actionable threat intelligence to help security teams understand and respond to threats
   • CTo enforce multi-factor authentication
   • DTo provide a virtual private network (VPN) service
   Reveal Solution Discussion Select an answer first