Defender Portal Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Microsoft Defender XDR

What you'll be asked

  1. Which website serves as the primary entry point for security administrators to access the unified Microsoft Defender XDR experience?
  2. In the Microsoft Defender portal, how does an 'Incident' differ from an 'Alert'?
  3. When using the 'Advanced Hunting' feature in the Microsoft Defender portal, which query language is used to proactively explore data?
  4. A security analyst needs to review a unified list of remediation actions that were triggered by automated investigations across both endpoint and email workloads. Which section of the portal should they use?
  5. An organization is moving toward a 'Least Privilege' model. How does the Unified Role-Based Access Control (RBAC) within the Microsoft Defender portal improve cross-workload management compared to legacy permissions?

Answers and explanations come after you submit.