Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table.
 
You plan to implement Microsoft Defender for Identity for the domain.
You install a Microsoft Defender for Identity standalone sensor on Server1.
You need to monitor the domain by using Microsoft Defender for Identity.
What should you do?

A. Configure port mirroring for Server1.

B. Install the Microsoft Monitoring Agent on DC1.

C. Install the Microsoft Monitoring Agent on Server1.

D. Configure port mirroring for DC1.








 

Suggested Answer: D

Reference:
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-port-mirroring

This question is in MS-500 Microsoft 365 Security Administration Exam
For getting Microsoft Certified: Security, Compliance, and Identity Fundamentals Certificate



Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.