Microsoft 365 FundamentalsDescribe core Microsoft 365 services and conceptsHard
A Microsoft 365 administrator is investigating a potential security incident involving suspicious email activity and malware detections across several user accounts. They need a centralized portal to review alerts, investigate threats, and manage security policies across identities, endpoints, email, and cloud apps. Which administrative center provides this unified security management experience?
- AMicrosoft 365 Defender portal
- BMicrosoft Azure AD admin center
- CMicrosoft Purview compliance portal
- DMicrosoft 365 admin center
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft 365 Defender portal
The Microsoft 365 Defender portal (formerly Microsoft 365 security center) provides a unified experience for security operations across identities (Defender for Identity), endpoints (Defender for Endpoint), email (Defender for Office 365), and cloud apps (Defender for Cloud Apps).
Why the other options are wrong
- B. The Azure AD admin center is for identity and access management, while related to security, it's not the unified portal for all threat types mentioned.
- C. The Microsoft Purview compliance portal focuses on data governance, compliance, and risk, not active threat investigation and response.
- D. The Microsoft 365 admin center is for general tenant administration, not deep security investigation and threat management.
Microsoft 365 Defender portal
A unified security operations platform that brings together capabilities from Microsoft Defender for Endpoint, Defender for Office 365, Defender for Identity, and Defender for Cloud Apps.
- Provides a centralized view for monitoring and managing security alerts and incidents.
- Enables unified threat investigation and response across various security domains.
- Offers advanced hunting capabilities and security analytics.
Memory trick: The 'Defender' portal defends 'All' the Microsoft 365 pieces.