Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Defender XDREasy
A company uses Microsoft 365 and has recently integrated Microsoft Defender for Endpoint. The security team wants to ensure that all devices, including servers, are fully protected against the latest threats. They also need to implement device isolation capabilities for rapid incident response. Which of the following components of Microsoft Defender for Endpoint should be deployed on their Windows Server 2019 machines to meet these requirements?
- AMicrosoft Defender for Identity sensor
- BMicrosoft Defender Antivirus in passive mode
- CMicrosoft Defender for Cloud Apps agent
- DMicrosoft Defender for Endpoint unified solution
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Defender for Endpoint unified solution
The unified solution for Microsoft Defender for Endpoint on Windows Server 2019 provides full protection, including EDR capabilities and device isolation, which are essential for comprehensive security and incident response.
Why the other options are wrong
- A. Microsoft Defender for Identity sensor monitors identity-related threats and is not responsible for endpoint protection or device isolation on servers.
- B. Microsoft Defender Antivirus in passive mode provides anti-malware protection but lacks the full EDR and incident response capabilities, such as device isolation, that the scenario requires.
- C. Microsoft Defender for Cloud Apps agent is designed for cloud app security and visibility, not direct endpoint protection for servers.
Defender for Endpoint Unified Solution for Servers
The unified solution for Microsoft Defender for Endpoint extends advanced threat protection, EDR, and automated investigation and remediation capabilities to Windows Server operating systems.
- Provides full Defender for Endpoint capabilities on servers.
- Supports various Windows Server versions, including 2019.
- Includes EDR, vulnerability management, and automated incident response features.
Memory trick: Servers need a UNIFIED shield for full endpoint defense.