You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint Plan 1 and contains a macOS device named Device1.You need to investigate a Defender for Endpoint agent alert on Device1. The solution must meet the following requirements:* Identify all the active network connections on Device1.* Identify all the running processes on Device1.* Retrieve the login history of Device1.* Minimize administrative effort.What should you do first from the Microsoft Defender portal?

From Devices, click Collect investigation package for Device 1.

From Advanced features in Endpoints, disable Authenticated telemetry.

From Advanced features in Endpoints, enable Live Response unsigned script execution.

From Devices, click Collect investigation package for Device 1.

From Devices, initiate a live response session on Device1.

You have an on-premises network.You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Identity.From the Microsoft Defender portal, you investigate an incident on a device named Device1 of a user named User1. The incident contains the following Defender for Identity alert.Suspected identity theft (pass-the-ticket) (external ID 2018)You need to contain the incident without affecting users and devices. The solution must minimize administrative effort.What should you do?

Reset the password for all the accounts that previously signed in to Device1.

DisableUser1 and quarantine Device1.

Disable User1, quarantine Device1, and reset the password for all the accounts that previously signed in to Device1.

Upload Script1.ps 1 to the library.

Modify the PowerShell execution policy of the device.

Upload Script1.ps 1 to the library.

File1.sys. File3.docx, and File4jclsx only

File2.pdf. File3.docxr and File4.xlsx only

File1.sys, File2.pdf, File3.dooc, and File4.xlsx

Defender Vulnerability Management - Remediation handling

Live response capabilities: Basic

Microsoft Sentinel Automation Contributor

Add the IP address of each device to the list of decoy accounts and hosts of the rule.

Device1, Device2, and Device3 only

Device1, Devke2, Device3, and Device4

You have an Azure subscription named Sub1 that uses Microsoft Defender for Cloud.

You need to assign the PCI DSS 4.0 initiative to Sub1 and have the initiative displayed in the Defender for Cloud Regulatory compliance dashboard.

From Security policies in the Environment settings, you discover that the option to add more industry and regulatory standards is unavailable.

What should you do first?

Become a Premium Member for full access