Question 35

Explanation

The reports section in Microsoft 365 Defender portal displays cards covering different areas like identities, data, and devices. You can view the protection status of identities and devices here.

Option Reports is the correct answer.

Reference Link: https://learn.microsoft.com/en-us/training/modules/describe-threat-protection-with-microsoft-365-defender/7-describe-microsoft-defender-portal#reports

In the Incidents section, you will find all the domains (users, mailboxes, and devices) that were affected by an alert. Option Incidents is an incorrect choice.

Reference Link: https://learn.microsoft.com/en-us/training/modules/describe-threat-protection-with-microsoft-365-defender/7-describe-microsoft-defender-portal#incidents-and-alerts

In the Action center, you will approve or reject pending remediation actions. It is an incorrect choice.

Reference Link: https://docs.microsoft.com/en-us/microsoft-365/security/defender/m365d-autoir-actions?view=o365-worldwide

Classification refers to data classification capabilities in the Microsoft Purview Compliance portal. Classification is not related to the Defender portal. It is an incorrect choice too.

https://learn.microsoft.com/en-us/training/modules/describe-information-protection-governance-capabilities-microsoft-365/3-describe-data-classification-capabilities-compliance-portal