Microsoft Defender for Identity Quiz

What you'll be asked

1. What is the primary purpose of deploying Microsoft Defender for Identity (MDI) sensors on domain controllers?
2. An administrator notices MDI is flagging 'Honeytoken' account usage. What does this indicate?
3. Which of the following is a prerequisite for MDI to detect lateral movement activities effectively?
4. How does Microsoft Defender for Identity integrate with Microsoft Sentinel for incident response?
5. During a suspected Pass-the-Ticket (PtT) attack, MDI detects an anomaly. Which specific Kerberos-related behavior is the sensor most likely evaluating to trigger this alert?

Answers and explanations come after you submit.