HOTSPOT -
You install Microsoft Defender for Identity sensors on domain controllers.
You add a member to the Domain Admins group. You view the timeline in Microsoft Defender for Identity and discover that information regarding the membership change is missing.
You need to meet the security requirements for Microsoft Defender for Identity reporting.
What should you configure? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
 
















 

Suggested Answer: 
    

Reference:
https://docs.microsoft.com/en-us/defender-for-identity/configure-windows-event-collection

This question is in MS-500 Microsoft 365 Security Administration Exam
For getting Microsoft Certified: Security, Compliance, and Identity Fundamentals Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.