nerdexam
Microsoft

AZ-801 · Question #99

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers DC1, DC2, and DC3. You connect a Microsoft Defender for Identit

The correct answer is C. Azure ATP Sensor setup.exe. To onboard domain controllers to Microsoft Defender for Identity, you must run the Azure ATP Sensor setup.exe installer on each domain controller.

Secure Windows Server on-premises and hybrid infrastructures

Question

Your network contains an Active Directory Domain Services (AD DS) domain named contoso.com. The domain contains three domain controllers DC1, DC2, and DC3. You connect a Microsoft Defender for Identity instance to the domain. You need to onboard all the domain controllers to Defender for Identity. What should you run on the domain controllers?

Options

  • AAzureConnectedMachineAgent.msi
  • BMARAAgentInstaller.exe
  • CAzure ATP Sensor setup.exe
  • DMMASSup-AMIDA.exe

How the community answered

(45 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    89% (40)
  • D
    4% (2)

Why each option

To onboard domain controllers to Microsoft Defender for Identity, you must run the Azure ATP Sensor setup.exe installer on each domain controller.

AAzureConnectedMachineAgent.msi

AzureConnectedMachineAgent.msi is the installer for the Azure Arc agent, which connects on-premises machines to Azure management services, but it is not the specific agent for Microsoft Defender for Identity.

BMARAAgentInstaller.exe

MARAAgentInstaller.exe is not the correct or recognized installer for the Microsoft Defender for Identity sensor on domain controllers.

CAzure ATP Sensor setup.exeCorrect

To onboard domain controllers to Microsoft Defender for Identity (formerly Azure ATP), the Azure ATP Sensor setup.exe installer must be run on each domain controller. This sensor monitors domain controller network traffic and events to detect advanced threats and suspicious activities.

DMMASSup-AMIDA.exe

MMASSup-AMIDA.exe is not the correct or recognized installer for the Microsoft Defender for Identity sensor; this might be a fabricated name or related to a different agent.

Concept tested: Microsoft Defender for Identity sensor installation

Source: https://learn.microsoft.com/en-us/defender-for-identity/install-sensor

Topics

#Microsoft Defender for Identity#Domain Controller Security#Sensor Deployment#Hybrid Security

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-801 Practice