Identity Protection and Microsoft Defender Quiz

What is the primary purpose of Microsoft Entra ID Protection?

• Encrypt user credentials

• Detect and respond to identity-based risks

• Backup user directory

• Manage multi-cloud environments

Which of the following is a risk detection method in Entra ID Protection?

• Disk encryption failure

• Impossible travel

• IP address assignment

• Group membership change

What type of risk policy in Entra ID Protection allows users to self-remediate risky sign-ins?

• Sign-in risk policy

• User risk policy

• MFA policy

• Device compliance policy

Entra ID Protection risk levels are:

• Low, Medium, Critical

• None, Low, Medium, High

• Low, Medium, Severe

• Warning, Alert, High

What is the default action when a user risk is detected and a user risk policy is configured?

• Disable the user

• Block all user access

• Prompt for multi-factor authentication

• Require password change

Which tool in Microsoft 365 Defender is used for creating custom threat queries?

• Cloud Discovery

• Attack Simulator

• Advanced Hunting

• Compliance Manager

Which query language is used in Microsoft Defender Advanced Hunting?

• SQL

• JSONPath

• KQL

• Regex

What schema table in Microsoft 365 Defender helps detect lateral movement or remote logins?

• DeviceEvents

• IdentityInfo

• DeviceNetworkEvents

• SigninLogs

Which Microsoft Defender product focuses on protecting SaaS applications?

• Defender for Endpoint

• Defender for Cloud

• Defender for Office 365

• Defender for Cloud Apps

Which of the following is NOT a signal collected by Defender for Cloud Apps?

• OAuth app behavior

• File uploads

• VPN client logs

• Shadow IT app usage