SC-200 Practice Question 3687
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: easy
You need to deploy Microsoft Defender for Identity across 10 on-premises Domain Controllers. Which component must be installed directly on each Domain Controller OS?
Answer Options
A
The Microsoft Defender for Identity sensor
B
The Apache HTTP server daemon
C
The Azure Bastion gateway agent
D
The Microsoft Intune Management Extension
Correct Answer
A: The Microsoft Defender for Identity sensor
Explanation
The Microsoft Defender for Identity sensor is installed directly onto domain controllers to capture network traffic, parse Kerberos/NTLM authentication requests, and read local event logs.