Exam MS-900 topic 1 question 186 discussion

First and second should be switched

Use artificial intelligence to detect anomalies and suspicious incidents ->Azure Active Directory Identity Protection https://docs.microsoft.com/en-us/azure/security/fundamentals/threat-detection Identify and detect malicious insider action to make it more difficult to compromise suer credentials ->Azure Advanced Threat Protection https://docs.microsoft.com/en-us/defender-for-identity/what-is Protect against spam and help prevent messaging policy violations ->Microsoft Exchange Online Protection https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview?view=o365-worldwide Scan emails and URLs to identify impersonation and malicious files ->Office 365 Threat Intelligence https://www.mimecast.com/content/office-365-threat-intelligence/

Correct is: AADIP AATP now is Defender for Identity Exchange Online Protection O365TI is now Microsoft Defender for Office 365

First and last are wrong: Should be: AAD Threat Protection AAD Identity Protection MEO Protection O365 Threat protection

Seems all out of whack on this question. Answers are off and 2 seems like it should be insider risk management which isn't even an option

1-Azure Active Dir Iden Protection 2- Azure Advanced threat Protection 3- MS Exchange Online Protection 4- Office 365 Threat Intelligence

https://techcommunity.microsoft.com/t5/security-compliance-and-identity/introducing-azure-advanced-threat-protection/ba-p/250332 and https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

1. Azure Advanced threat protection https://azure.microsoft.com/en-in/blog/detect-malicious-activity-using-azure-security-center-and-azure-log-analytics/ 2. Identity protection https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection 3. Exchange Online Protection 4. Office 365 threat Intelligence https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-ti?view=o365-worldwide

O365 Threat Intelligence is now MS Defender for Office Plan 2: https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/threat-trackers?view=o365-worldwide

According the links provided: First answer is AAD Identity protection Second is Azure Advanced Threat protection (change of name, now it is called Microsoft Defender for Identity) Third is MS Exchange Online protection Forth is Office 365 Threat Intelligence (all the plans for the Office 365 Threat Intelligence includes MS Exchange Online protection also, so it is a little bit confusing).

NOTICE: Each tool may be used once, more than once, or not at all 1. Azure Advanced Threat Protection 2. Azure Advanced Threat Protection 3. Microsoft Exchange Online Protection 4. Office 365 Threat Intellegence https://docs.microsoft.com/en-us/azure-advanced-threat-protection/what-is-atp https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/office-365-atp?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview?view=o365-worldwide https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/overview-identity-protection

https://docs.microsoft.com/en-us/defender-for-identity/what-is: "Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization" https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/exchange-online-protection-overview?view=o365-worldwide: "Exchange Online Protection (EOP) is the cloud-based filtering service that protects your organization against spam, malware, and other email threats. EOP is included in all Microsoft 365 organizations with Exchange Online mailboxes." https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/concept-identity-protection-risks https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/overview?view=o365-worldwide Answer is correct

Be carefull, microsoft changed a lot of these names. CTRL+F on the following "Today, we are making the following branding changes to unify the Microsoft 365 Defender technologies" on the site below to find the name changes https://www.microsoft.com/security/blog/?p=91813

Answers given are correct First is Identity protection Second is Advanced threat protection, read link: Microsoft Defender for Identity (formerly Azure Advanced Threat Protection, also known as Azure ATP) is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions