You have a Microsoft 365 tenant You plan to manage incidents in the tenant by using the Microsoft Defender XDR. Which Microsoft service source will appear on the Incidents page of the Microsoft…

The correct answer is B. Microsoft Defender for Identity. The Incidents page in Microsoft Defender XDR shows incidents aggregated from services that are part of the Defender XDR suite. Microsoft Defender for Identity is one of these integrated sources and its alerts contribute directly to Defender XDR incidents.

Submitted by wei.xz· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR

Question

You have a Microsoft 365 tenant You plan to manage incidents in the tenant by using the Microsoft Defender XDR. Which Microsoft service source will appear on the Incidents page of the Microsoft Defender portal?

Options

AAzure Information Protection
BMicrosoft Defender for Identity
CAzure Web Application Firewall
DMicrosoft Sentinel

How the community answered

(48 responses)

A
4% (2)
B
92% (44)
C
2% (1)
D
2% (1)

Explanation

The Incidents page in Microsoft Defender XDR shows incidents aggregated from services that are part of the Defender XDR suite. Microsoft Defender for Identity is one of these integrated sources and its alerts contribute directly to Defender XDR incidents.

Topics

#Microsoft Defender XDR#Microsoft Defender for Identity#Incidents page#XDR integration

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice