Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsEasy
A small business uses Microsoft 365 and wants to ensure that all administrative actions within their tenant are recorded and auditable for compliance purposes. Which Microsoft 365 Defender capability provides this functionality?
- AMicrosoft 365 Defender for Identity
- BMicrosoft 365 Defender for Cloud Apps
- CMicrosoft 365 Defender for Endpoint
- DMicrosoft 365 Defender for Office 365
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft 365 Defender for Cloud Apps
Microsoft 365 Defender for Cloud Apps (formerly Microsoft Cloud App Security) provides visibility into cloud apps and services, including user activities and administrative actions, which is crucial for auditing and compliance.
Why the other options are wrong
- A. Microsoft 365 Defender for Identity focuses on protecting identity-based attacks against Active Directory.
- C. Microsoft 365 Defender for Endpoint secures endpoint devices like workstations and servers.
- D. Microsoft 365 Defender for Office 365 protects against threats in email and collaboration tools.
Microsoft 365 Defender for Cloud Apps
A Cloud Access Security Broker (CASB) that provides deep visibility, strong data controls, and enhanced threat protection for cloud apps.
- Monitors user activities in cloud apps.
- Detects shadow IT.
- Enforces data loss prevention policies.
Memory trick: Cloud Apps: See All, Control All, Protect All.