Question

Your organization has fully onboarded all Windows servers and workstations to Microsoft Defender for Endpoint. Leadership is concerned about unmanaged network devices such as routers, switches, and printers that cannot have the Defender sensor installed. You need to gain visibility into these unmanaged network devices and assess them for vulnerabilities without deploying an agent to each device. What should you do?

Accepted Answer

Enable network device discovery in the Defender portal and designate one or more onboarded devices as network assessment scanning devices with authenticated scanning configured.

Answer

Onboard each network device individually using the local script package downloaded from the Defender portal.

Answer

Deploy Microsoft Defender for Cloud Apps Cloud Discovery to inventory the network devices from firewall logs.

Answer

Create a device group in the Defender portal and assign the network devices an automation level of Full.