Security Operations Analyst Flashcards

Master key concepts with interactive flashcards

Stay focused on SC-200

Foci runs Pomodoro-style focus sessions and blocks distractions while you study for your certification.

Try Foci

Card 1 of 10

0 known

Manage a security operations environment

Question

What is Microsoft Defender for Identity (MDI) and what data source does it use?

Click to reveal answer

Manage a security operations environment

Answer

MDI is a cloud-based security solution that protects Active Directory environments. It uses a lightweight sensor installed on Domain Controllers that captures and analyzes network traffic (LDAP, Kerberos, NTLM, DNS, etc.) and Windows Event logs directly from the DC, without a network TAP.

Click to show question

Tip: Use ← → arrow keys to navigate, Space to flip card