Home » Microsoft » MS-500 v.2 » Which of the following will you download and install on the server?
NOTE: This question-is a part of a series of questions that present the same scenario. For each of the following statements, select the best response(s) to the question-or statement below. Each answer is worth one point.
After you answer a question-in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring a Windows Server 2016 server in your environment that will be a domain controller. You want to enable the following security products on the new server:
Azure ATP
Defender ATP
Azure Sentinel
Which of the following will you download and install on the server? Each answer is part of the complete solution. (Choose two.)
A. Microsoft Management Agent
B. Local script
C. Sensor setup package
D. Azure Management Agent
Correct Answer: AC
Explanation/Reference:
Sentinel is not officially part of the curriculum, but in this context is synonymous with Azure Log Analytics that is part of the curriculum.
You need a sensor download for Azure ATP and you need MMA for Sentinel and Defender ATP. No such thing as Azure Management Agent. You could also use Azure Security Console to onboard Windows Server 2016 – this also just installs MMA. You would need a local script if you had a Windows Server 2019 – just like with W10.
Reference:
https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/configure-server-endpoints#install-and-configure-microsoft-monitoring-agent-mma-to-report-sensor-data-to-microsoft-defender-atp https://docs.microsoft.com/en-us/azure-advanced-threat-protection/install-atp-step4 https://docs.microsoft.com/en-us/azure/sentinel/connect-windows-security-events
