お客様は、DB1 という名前のデータベース サーバーを含む Microsoft 365 E5 サブスクリプションをご利用中です。DB1 は Microsoft Defender XDR にオンボーディングされています。
攻撃対象領域マップにDB1が表示されるようにする必要があります。
何を設定すればよいですか?
正解:A
In Microsoft Defender XDR , the attack surface map visually prioritizes assets that are tagged as critical to your organization's operations. According to Microsoft's documentation:
"Critical asset rul es help ensure high-value or sensitive resources are highlighted on the attack surface map for monitoring and correlation in incidents." To have DB1 (a database server) appear on the attack surface map, it must be designated as a critical asset .
When you c onfigure a critical asset rule , Defender XDR automatically classifies and surfaces that system on the map, enabling enhanced monitoring, prioritization, and contextual correlation in security incidents.
Other options do not achieve this:
* Asset rule : general classification, not used for attack surface prioritization.
* Honeytoken entity tag : marks decoy assets for threat detection.
* Sensitive entity tag : used for sensitivity context in data or user-based scenarios.
# Correct answer: A. a critical asset rule