Microsoft · SC-900
Microsoft Defender XDR
SC-900 · Lesson 10 of 15 · 1:10:41
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: Microsoft Defender XDR (one incident queue, shared automatic responses, automatic attack disruption, advanced hunting), Defender for Office 365 (Safe Attachments, Safe Links, zero-hour auto purge, Plan 1 and Plan 2, attack simulation training), Defender for Endpoint (attack surface reduction, next-generation protection, EDR, automated investigation) and Defender for Identity (sensors on domain controllers, lateral movement, domain dominance). Includes three original practice questions.
Preview the topics
- The security team wants to find out which employees would click a phishing link, with a realistic but harmless fake campaign, and then train them. What should it use?
- A laptop shows signs of an active attack. The analyst must cut it off from the network right away, while keeping its connection to Defender for the investigation. Which capability does that?
- With one stolen workstation password, an attacker starts moving from server to server inside the on-premises Active Directory domain. Which product detects this?