MS-102 · Question #463
Your network contains an on-premises Active Directory domain. Your company has a security policy that prevents additional software from being installed on domain controllers. You need to monitor a…
The correct answer is D. Deploy a Microsoft Defender for Identity standalone sensor, and then configure port mirroring. We cannot install additional software on the domain controllers. Azure ATP Standalone Sensor is a full agent installed on a dedicated server that can monitor traffic from multiple domain controllers. This is an alternative to those that do not wish to install an agent directly…
Question
Your network contains an on-premises Active Directory domain. Your company has a security policy that prevents additional software from being installed on domain controllers. You need to monitor a domain controller by using Microsoft Defender for Identity. What should you do? More than one answer choice may achieve the goal. Choose the BEST answer.
Options
- ADeploy a Microsoft Defender for identity sensor, and then configure port mirroring.
- BDeploy a Microsoft Defender for identity sensor, and then configure detections.
- CDeploy a Microsoft Defender for Identity standalone sensor, and then configure detections.
- DDeploy a Microsoft Defender for Identity standalone sensor, and then configure port mirroring.
How the community answered
(25 responses)- A8% (2)
- B20% (5)
- C4% (1)
- D68% (17)
Explanation
We cannot install additional software on the domain controllers. Azure ATP Standalone Sensor is a full agent installed on a dedicated server that can monitor traffic from multiple domain controllers. This is an alternative to those that do not wish to install an agent directly on a domain https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step5 https://docs.microsoft.com/en-us/defender-for-identity/configure-port-mirroring
Topics
Community Discussion
No community discussion yet for this question.