SC-200 Certification Practice Question #22

Question

You have a Microsoft 365 E5 subscription that is linked to a hybrid Azure AD tenant.

You need to identify all the changes made to Domain Admins group during the past 30 days.

What should you use?

Accepted Answer

Domain Admins is one of Defender for Identity's default sensitive groups, and the built-in "Modification to sensitive groups" report (Reports > Identities > Report management) lists every change made to those groups over a selectable time window — exactly the 30-day Domain Admins change history the question asks for. Suggested Answer, the unanimous Most Voted, the top community comment, and MS Learn all converge on A. The lone D dissent misreads the hybrid scenario; the on-prem Domain Admins group is precisely what Defender for Identity monitors. Confidence is held at 90 rather than higher because the report has since been folded into Defender XDR (some commenters noted UI relocation), but the report itself still exists.

More SC-200 practice questions