AB-650 Practice Question 3146
Exam: AB-650
Domain: Govern and secure Microsoft 365 tenants and workloads
Difficulty: medium
Which component of Microsoft Defender for Identity is deployed directly onto on-premises Domain Controllers to parse network traffic and Windows event logs?
Answer Options
A
The Microsoft Defender for Identity sensor
B
Apache HTTP proxy service
C
Exchange Edge Transport agent
D
Windows Media Player network sharing service
Correct Answer
A: The Microsoft Defender for Identity sensor
Explanation
The Defender for Identity sensor installs directly onto domain controllers to monitor authentication traffic and event logs without requiring port mirroring.