Microsoft Defender Quiz

Your organization is experiencing a wave of phishing emails targeting employees. You need to mitigate this threat using Microsoft Defender for Office 365. Which feature in Microsoft Defender for Office 365 can help you automatically investigate and remediate these phishing attacks?

• Safe Links

• Safe Attachments

• Attack Simulation Training

• Automated Investigation and Response (AIR)

You notice abnormal login attempts from multiple countries for a user's account, indicating a possible compromise. Which tool within Microsoft Defender XDR can be used to detect and remediate these identity-based threats?

• Microsoft Defender for Endpoint

• Microsoft Entra ID Protection

• Microsoft Defender for Cloud Apps

• Microsoft Defender for Identity

Your Microsoft 365 Defender portal has raised an alert for a user attempting to download large amounts of confidential data from a cloud app. Which Microsoft Defender for Cloud Apps feature will help you discover and control this suspicious activity?

• Cloud Discovery

• Data Loss Prevention (DLP)

• Conditional Access App Control

• Advanced Hunting

Multiple endpoints in your organization have been infected by malware, and you're worried it might spread. What feature in Microsoft Defender for Endpoint allows you to contain the compromised machines and prevent the malware from spreading across the network?

• Automated Investigation

• Device Isolation

• Attack Surface Reduction Rules

• Safe Links

After detecting an increase in suspicious file-sharing activity, you need to investigate possible insider threats involving cloud data leaks. Which tool should you use in Microsoft Defender for Cloud Apps to classify and protect sensitive information and prevent data exfiltration?

• Cloud Discovery

• Attack Simulation

• Data Loss Prevention (DLP) policies

• Conditional Access Policies

You have been alerted to an unauthorized lateral movement attempt across your network. Which component of Microsoft Defender XDR can help you stop lateral movement by identifying and remediating compromised identities?

• Microsoft Defender for Office 365

• Microsoft Defender for Endpoint

• Microsoft Defender for Identity

• Microsoft Entra ID Protection

After reviewing security reports, you notice a sudden spike in risky sign-ins for a high-level executive account. Which feature of Microsoft Entra ID Protection should you use to mitigate risks and enforce stronger sign-in requirements for this account?

• Conditional Access

• Attack Simulation Training

• Safe Links

• Automated Investigation

You receive an alert that an employee is downloading suspicious files from a third-party cloud application. How can you immediately address this threat using Microsoft Defender for Cloud Apps?

• Run an Attack Simulation

• Initiate an Automated Investigation

• Use Conditional Access App Control

• Apply Safe Attachments

Your organization faces a ransomware attack, and some machines have been compromised. What is the best response using Microsoft Defender for Endpoint to prevent the attack from spreading to other devices?

• Block external email communication

• Initiate automated threat response

• Isolate compromised devices

• Scan all endpoints for vulnerabilities

A compromised user account is sending out phishing emails to other employees. How can you quickly mitigate this issue using Microsoft Defender for Office 365?

• Enable Safe Links

• Configure Phishing Policies

• Block the account using Automated Investigation and Response (AIR)

• Run a Cloud Discovery report