No matching guide sections
Change the search or section filter.
Study Guide preview
Unlock Pro for every MS-102 flashcard-note lesson.
Preview the beginning of Section 1. Pro includes the complete Study Guide by section, plus Course Notes, guided course access, and Pro downloads.
Unlock with Pro
Opens the MS-102 Practice Test purchase options.
Section 1
Review and respond to security reports and alerts generated by Microsoft Defender XDR
Preview
Preview: Manage security and threats by using Microsoft Defender XDR (30–35%)
Preview includes- 4 of 5 lesson topics
- 1 overview segment
- 3 core concepts
- 2 exam tips
Lesson Topics
- Review Initial Incident Queue
- Analyze Incident Graph Details
- Investigate Correlated Evidence
- Assign Incident Ownership
Overview
This objective focuses on your ability to review and respond to security reports and alerts generated by Microsoft Defender XDR, specifically within the context of incident investigation and resolution.
Core Concepts
- Defender XDR correlates alerts and assets into incidents.
- Incident investigation starts with the incident graph and correlated evidence.
- Incident resolution requires accurate classification, investigation, and remediation.
Exam Tips
- Focus on understanding the 'attack story' revealed by the incident graph and correlated evidence.
- Always prioritize understanding the context of the incident before taking remediation actions – consider potential disruption to users or systems.
Section 1 continues in Pro.Unlock Pro to read the full Review and respond to security reports and alerts generated by Microsoft Defender XDR lesson plus every remaining MS-102 Study Guide section.
Unlock with Pro
Section 2
Implement and manage a Microsoft 365 tenant
Pro
Implement and manage a Microsoft 365 tenant unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 3
Implement and manage identity synchronization with Microsoft Entra tenant
Pro
Implement and manage identity synchronization with Microsoft Entra tenant unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 4
Implement Microsoft Purview information protection and data lifecycle management
Pro
Implement Microsoft Purview information protection and data lifecycle management unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 5
Implement and manage email and collaboration protection by using Microsoft Defender for Office 365
Pro
Implement and manage email and collaboration protection by using Microsoft Defender for Office 365 unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 6
Manage users and groups
Pro
Manage users and groups unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 7
Implement and manage authentication
Pro
Implement and manage authentication unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 8
Implement and manage endpoint protection by using Microsoft Defender for Endpoint
Pro
Implement and manage endpoint protection by using Microsoft Defender for Endpoint unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 9
Manage roles and role groups
Pro
Manage roles and role groups unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 10
Implement and manage secure access
Pro
Implement and manage secure access unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 11
Implement and manage Microsoft Defender for Cloud Apps
Pro
Implement and manage Microsoft Defender for Cloud Apps unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro
Section 12
Implement Microsoft Purview data loss prevention (DLP)
Pro
Implement Microsoft Purview data loss prevention (DLP) unlocks with Pro.Unlock Pro to read the full 5 topics flashcard-note study guide for this section.
Unlock with Pro