MS-900 Question #35: Real Exam Question with Answer & Explanation

Question

Hotspot Question A company is evaluating threat protection solutions of Microsoft 365. The solution must meet the following requirements: - Act as a gatekeeper between the hosted applications and the end user - Work gatekeeper between the hosted of the end user - Work regardless of the device of the end user Which solution should you deploy? Select the answer that correctly completes the sentence. Answer:

Options

• __typehotspot
• variantdropdown

Explanation

Microsoft Defender for Cloud Apps is the correct solution because it functions as a Cloud Access Security Broker (CASB), acting as a gatekeeper for various cloud applications and operating independently of the end-user's device.

Approach. The user must click on the dropdown menu and select 'Cloud Apps.'.

Common mistakes.

• common_mistake. Selecting 'Endpoint.', 'Identity.', or 'Office 365.' from the dropdown.
• reasoning. Each of the other options addresses different aspects of threat protection, but none align with both requirements:

• Microsoft Defender for Endpoint: This solution protects endpoints (workstations, servers) from threats. It relies on an agent installed on the device and does not act as a general 'gatekeeper' for cloud applications.
• Microsoft Defender for Identity: This solution focuses on protecting identity systems (like Active Directory) from identity-based threats. It does not provide application-level gatekeeping.
• Microsoft Defender for Office 365: This solution provides advanced threat protection specifically for Office 365 services (email, SharePoint, Teams). While it protects cloud applications, its scope is limited to Office 365, and it doesn't offer the broad 'gatekeeper between hosted applications' functionality that Defender for Cloud Apps provides across a wider range of cloud services, including SaaS, PaaS, and IaaS.

Concept tested. Understanding the distinct roles and capabilities of different components within the Microsoft Defender suite, specifically recognizing Microsoft Defender for Cloud Apps as a Cloud Access Security Broker (CASB) for comprehensive cloud application security, monitoring, and control, independent of end-user device.

No community discussion yet for this question.