Your network contains an Active Directory Domain Services (AD DS) domain named Domain1. You have a Microsoft Entra tenant. Domain1 syncs with the tenant by using Microsoft Entra Connect. You need to…

The correct answer is C. Microsoft Defender for Identity. Defender for Identity is fully integrated with Microsoft Defender XDR, and leverages signals from both on-premises Active Directory and cloud identities to help you better identify, detect, and investigate advanced threats directed at your organization. Note: Detecting and…

Design security operations, identity, and compliance capabilities

Question

Your network contains an Active Directory Domain Services (AD DS) domain named Domain1. You have a Microsoft Entra tenant. Domain1 syncs with the tenant by using Microsoft Entra Connect. You need to monitor Domain1 for privilege escalation attacks. What should you use?

Options

AMicrosoft Entra ID Protection
BMicrosoft Defender for Servers
CMicrosoft Defender for Identity
DPrivileged Identity Management (PIM)

How the community answered

(30 responses)

A
3% (1)
B
20% (6)
C
70% (21)
D
7% (2)

Explanation

Defender for Identity is fully integrated with Microsoft Defender XDR, and leverages signals from both on-premises Active Directory and cloud identities to help you better identify, detect, and investigate advanced threats directed at your organization. Note: Detecting and preventing privilege escalation attacks leveraging Kerberos relaying (KrbRelayUp) Microsoft Defender for Identity detects activity from the early stages of the attack chain by monitoring anomalous behavior as seen by the domain controller. https://learn.microsoft.com/en-us/defender-for-identity/what-is escalation-attacks-leveraging-kerberos-relaying- krbrelayup/

Topics

#Identity Threat Detection#Hybrid Identity Security#Active Directory Monitoring#Microsoft Defender for Identity

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice