AZ-500 Question 232
Select 2Your organization recently acquired multiple subsidiary domains and brand names. You want to ensure Microsoft Defender External Attack Surface Management (EASM) automatically discovers and monitors these newly acquired assets. Which two of the following actions should you take to properly set up EASM for ongoing discovery?
- A
Provide high-level domains, brand names, and known IP ranges to EASM so it can associate these assets to your organization
- B
Enable forced internal network scanning by installing an EASM agent on all on-premises servers
- C
Use brand monitoring within EASM to track new domain registrations related to your organization's brand
- D
Integrate EASM findings directly with Microsoft Entra ID to automatically pull internal user identities
Show answer and explanation
Correct answers: A, C
Explanation
To maximize EASM’s effectiveness, you need to provide it with the core details of your external digital footprint, domains, IP ranges, and brands, to identify unknown or newly acquired external endpoints. Brand monitoring helps track new domain registrations or variations of your brand, which is critical for discovering and mitigating potential external threats. Refer to Microsoft Defender EASM documentation (in the Microsoft Defender for Threat Intelligence section) for detailed setup guidance.
- A. Correct.
Correct. Supplying EASM with your top-level domains, brand references, and IP blocks helps the system link discovered assets to your organization and maintain up-to-date visibility. Without this information, newly acquired external endpoints may go undetected.
- B. Incorrect.
Incorrect. EASM focuses on external internet-facing assets; it does not rely on installing agents on internal servers for discovery. Agents inside the network do not enable external asset enumeration in EASM.
- C. Correct.
Correct. Brand monitoring is a capability that helps detect unauthorized or newly registered domains closely matching your brand names, ensuring EASM can alert you to possible brand infringement or new acquisitions.
- D. Incorrect.
Incorrect. EASM does not natively integrate with Microsoft Entra ID (formerly Azure AD) for discovering external assets. Microsoft Entra ID deals primarily with identity and access management, not external asset discovery.