A company plans to implement Microsoft Defender XDR services in its Microsoft 365 environment. The company requires that its security solution: - Assesses the configuration of its internal network…

Question

Options

• ADefender for Endpoint
• BDefender for Cloud Apps
• CDefender for Office 365
• DDefender Vulnerability Management
• EDefender for Identity

• A
  11% (2)
• C
  5% (1)
• D
  79% (15)
• E
  5% (1)

Explanation

Explanation

Microsoft Defender Vulnerability Management (option D) is purpose-built to discover and assess security weaknesses across an organization's environment, including network share configurations, browser extension permissions, expiring certificates, and installed software inventory - all of which directly match the requirements listed in the question.

Why the distractors are wrong:

• A (Defender for Endpoint): Focuses on endpoint detection, response, and threat protection rather than the broad vulnerability and configuration assessment functions described.
• B (Defender for Cloud Apps): Specializes in cloud application security, shadow IT discovery, and SaaS app governance - not device-level configuration assessments.
• C (Defender for Office 365): Targets email and collaboration tool threats (phishing, malware in attachments) and has no relevance to device certificates or network shares.
• E (Defender for Identity): Monitors Active Directory signals to detect identity-based attacks and compromised accounts - not software inventory or device configuration.

Memory Tip: Think of Vulnerability Management = "What's wrong with my devices and configs?" - if the question asks about assessing, inventorying, or identifying weaknesses on devices (certificates, extensions, software, shares), Defender Vulnerability Management is your answer. The key word pattern is "assesses" + "identifies" at the device/config level.

No community discussion yet for this question.