Question
Your company has a Microsoft 365 subscription and uses Microsoft Defender for Identity.
You are informed about incidents that relate to compromised identities.
You need to recommend a solution to expose several accounts for attackers to exploit. When the attackers attempt to exploit the accounts, an alert must be triggered.
Which Defender for Identity feature should you include in the recommendation?
- A. sensitivity labels
- B. custom user tags
- C. standalone sensors
- D. honeytoken entity tags Correct
Explanation
Honeytoken entity tags are designed to act as traps for malicious actors. When an attacker attempts to exploit a honeytoken-tagged account, Defender for Identity triggers an alert.
