A company is planning to use Microsoft Defender XDR. The company needs to protect Windows 10 client computers from malicious viruses. The company also needs to identify unauthorized cloud apps that are used by end users. You need to identify the Microsoft Defender XDR solutions that meet the requirements. Which two solutions should you choose? Each correct answer presents part of the solution.

The question presents two distinct security requirements. The first, protecting Windows 10 clients from viruses, is a core function of an endpoint protection platform. Microsoft Defender for Endpoint provides next-generation protection, including robust antivirus and antimalware capabilities, specifically for client operating systems like Windows 10. The second requirement, identifying unauthorized cloud apps (also known as Shadow IT), is the primary function of a Cloud Access Security Broker (CASB). Microsoft Defender for Cloud Apps is Microsoft's CASB solution, designed to discover and control the use of cloud applications across an organization, directly addressing this need.

A. Microsoft Defender for Office 365 protects collaboration services like Exchange Online and SharePoint Online from threats, not the client operating system itself.
C. Microsoft Defender for Identity is focused on protecting on-premises Active Directory identities from compromise; it does not provide endpoint protection or discover cloud app usage.

1. Microsoft Learn. (2023). Microsoft Defender for Endpoint. "Defender for Endpoint includes next-generation protection to reinforce the security perimeter of your network. Next-generation protection is designed to catch all kinds of emerging threats." Retrieved from https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/next-generation-protection?view=o365-worldwide (Section: Next-generation protection).

2. Microsoft Learn. (2023). What is Microsoft Defender for Cloud Apps?. "Microsoft Defender for Cloud Apps is a Cloud Access Security Broker (CASB)... It helps you to identify and control the use of Shadow IT, discovering and managing apps that are in use in your organization." Retrieved from https://learn.microsoft.com/en-us/defender-cloud-apps/what-is-defender-for-cloud-apps (Section: What is Defender for Cloud Apps?).

3. Microsoft Learn. (2023). Discover and manage shadow IT. "Defender for Cloud Apps helps you discover the cloud apps, IaaS, and PaaS services used by your organization. This process is called Shadow IT Discovery." Retrieved from https://learn.microsoft.com/en-us/defender-cloud-apps/shadow-it-discovery-overview (Section: How Defender for Cloud Apps helps).

4. Microsoft Learn. (2023). What is Microsoft Defender for Identity?. "Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization." Retrieved from https://learn.microsoft.com/en-us/defender-for-identity/what-is (Section: What is Microsoft Defender for Identity?).