SC-200 Practice Question 3687

Exam: SC-200
Domain: Manage a security operations environment
Difficulty: easy
You need to deploy Microsoft Defender for Identity across 10 on-premises Domain Controllers. Which component must be installed directly on each Domain Controller OS?

Answer Options

A
The Microsoft Defender for Identity sensor
B
The Apache HTTP server daemon
C
The Azure Bastion gateway agent
D
The Microsoft Intune Management Extension

Correct Answer

A: The Microsoft Defender for Identity sensor

Explanation

The Microsoft Defender for Identity sensor is installed directly onto domain controllers to capture network traffic, parse Kerberos/NTLM authentication requests, and read local event logs.