SC-900 Microsoft Defender XDR Practice Question
Which THREE components are part of Microsoft Defender XDR? (Choose three.)
⚠ Common exam trap
Test-takers frequently confuse Microsoft Sentinel (a SIEM) as part of Defender XDR, but Sentinel is an external analytics layer that can ingest Defender XDR data, not a built-in component of the XDR suite.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Defender for Office 365
Microsoft Defender XDR is a unified security operations platform that integrates threat signals across endpoints, identities, and email/collaboration tools. Its core components include Microsoft Defender for Office 365 (email and collaboration protection), Microsoft Defender for Identity (identity security), and Microsoft Defender for Endpoint (endpoint detection and response). Option A (Microsoft Purview) is a data governance and compliance solution, not part of XDR. Option C (Microsoft Sentinel) is a cloud-native SIEM that can ingest data from XDR but is not a built-in component of Defender XDR. Therefore, the correct answers are B, D, and E.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Purview
Why it's wrong here
Data governance and compliance.
- ✓
Microsoft Defender for Office 365
Why this is correct
Part of the XDR suite.
- ✗
Microsoft Sentinel
Why it's wrong here
A separate SIEM product.
- ✓
Microsoft Defender for Identity
Why this is correct
Identity threat detection.
- ✓
Microsoft Defender for Endpoint
Why this is correct
Endpoint detection and response.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Office 365
Office 365 is a cloud-based subscription service from Microsoft that provides access to productivity applications like Word, Excel, and Outlook, along with other cloud services, for a monthly or annual fee.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.