SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

By Microsoft · Question Mode

QuestionQ32

Manage and monitor security posture

You have a Microsoft Defender XDR environment.

You also have a Microsoft Power Platform environment where makers publish custom Microsoft Copilot Studio agents.

You need to enable real-time protection so suspicious tool invocations are blocked before an agent performs actions, and related alerts are displayed in the Microsoft Defender portal.

What should you do? Each action can be used once, more than once, or not at all.

Drag & Drop
In Microsoft Defender XDR:
In Power Platform:
Explanation

Microsoft Defender inspects Copilot Studio tool invocations at runtime and can block a suspicious action before it runs. The Microsoft 365 app connector is required for the related alerts and incidents to appear in the Microsoft Defender portal. Power Platform completes the external threat-detection integration by configuring the Microsoft Entra application ID that authenticates Copilot Studio with Microsoft Defender.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!