Question
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring Microsoft Defender for Identity integration with Active Directory.
From the Microsoft Defender for identity portal, you need to configure several accounts for attackers to exploit.
Solution: You add the accounts to an Active Directory group and add the group as a Sensitive group.
Does this meet the goal?
- A. Yes
- B. No Correct
Explanation
The Sensitive tag marks high-value accounts and groups, such as administrators, so that Defender for Identity monitors them more closely and shows them in lateral movement paths; it does not make them decoys. Accounts meant as bait for attackers are tagged as Honeytoken accounts instead.
