Monitor the domain by using Defender for Identity

Written by John Gruber Published on Last Updated on

Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table.

servers chart

You plan to implement Defender for Identity for the domain.

You install a Defender for Identity standalone sensor on Server1.

You need to monitor the domain by using Defender for Identity.

What should you do?

Install the Microsoft Monitoring Agent on DC1.

Configure port mirroring for DC1.

Configure port mirroring for Server1.

Install the Microsoft Monitoring Agent on Server1.

Click to show answer

How to setup a DC to communicate through a member server:

1. Install the standalone sensor on Server2

2. Setup event subscription on Server2

3. Setup port mirroring on Server1

< Previous Next > Skip Exam >>