Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft Security solutionsHard
A multi-national corporation requires a solution to protect their employees' Windows, macOS, Linux, Android, and iOS devices from advanced persistent threats (APTs), ransomware, and fileless malware. The security team needs capabilities for endpoint detection and response (EDR), automated investigation, and vulnerability management across all these diverse operating systems. Which Microsoft security solution provides these capabilities?
- AMicrosoft Intune
- BMicrosoft Defender for Cloud Apps
- CMicrosoft Defender for Identity
- DMicrosoft Defender for Endpoint
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Defender for Endpoint
Microsoft Defender for Endpoint is an enterprise endpoint security platform that provides preventative protection, post-breach detection, automated investigation, and response for a wide range of operating systems, including Windows, macOS, Linux, Android, and iOS.
Why the other options are wrong
- A. Microsoft Intune is for unified endpoint management (MDM/MAM), not advanced threat protection and EDR.
- B. Microsoft Defender for Cloud Apps is a CASB for cloud applications, not endpoint security.
- C. Microsoft Defender for Identity focuses on protecting Active Directory identities, not endpoint devices.
Microsoft Defender for Endpoint (MDE)
An enterprise endpoint security platform for preventative protection, post-breach detection, automated investigation, and response.
- Supports Windows, macOS, Linux, Android, and iOS.
- Includes Endpoint Detection and Response (EDR) capabilities.
- Offers vulnerability management and attack surface reduction.
Memory trick: Defender for Endpoint is the 'global bodyguard' for all your devices, no matter the OS.