You have a Microsoft 365 E5 subscription that contains a database server named DB1. DB1 is onboarded to Microsoft Defender XDR.
You need to ensure that DB1 appears on the attack surface map.
What should you configure?
Correct Answer: A
In Microsoft Defender XDR , the attack surface map visually prioritizes assets that are tagged as critical to your organization's operations. According to Microsoft's documentation:
"Critical asset rul es help ensure high-value or sensitive resources are highlighted on the attack surface map for monitoring and correlation in incidents." To have DB1 (a database server) appear on the attack surface map, it must be designated as a critical asset .
When you c onfigure a critical asset rule , Defender XDR automatically classifies and surfaces that system on the map, enabling enhanced monitoring, prioritization, and contextual correlation in security incidents.
Other options do not achieve this:
* Asset rule : general classification, not used for attack surface prioritization.
* Honeytoken entity tag : marks decoy assets for threat detection.
* Sensitive entity tag : used for sensitivity context in data or user-based scenarios.
# Correct answer: A. a critical asset rule