Microsoft 365 Fundamentals MS-900 Practice Question

Microsoft Defender for Identity is designed to protect on-premises Active Directory by monitoring user behaviors and activities to detect compromised credentials, lateral movement, and other advanced attacks. It helps security analysts identify and respond to threats involving on-premises user accounts and directory services. Microsoft Defender for Endpoint secures devices against malware and other endpoint threats, but does not specialize in monitoring directory services. Microsoft Defender for Office 365 protects email and collaboration tools from phishing and malware. Microsoft Intune is a device management solution that manages device compliance and security policies but does not provide advanced threat detection for on-premises user accounts.