Weekend Sale Special Limited Time 65% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bigdisc65

Pass SC-200 Exam Guide

Page: 7 / 11
Question 28

You have a Microsoft 365 E5 subscription that uses Microsoft 365 Defender.

You need to review new attack techniques discovered by Microsoft and identify vulnerable resources in the subscription. The solution must minimize administrative effort

Which blade should you use in the Microsoft 365 Defender portal?

Options:

A.

Advanced hunting

B.

Threat analytics

C.

Incidents & alerts

D.

Learning hub

Question 29

You have a Microsoft 365 E5 subscription that uses Microsoft 365 Defender for Endpoint.

You need to ensure that you can initiate remote shell connections to Windows servers by using the Microsoft 365 Defender portal.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 30

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint

You need to identify any devices that triggered a malware alert and collect evidence related to the alert. The solution must ensure that you can use the results to initiate device isolation for the affected devices.

What should you use in the Microsoft 365 Defender portal?

Options:

A.

Incidents

B.

Investigations

C.

Advanced hunting

D.

Remediation

Question 31

You have a Microsoft 365 subscription that uses Microsoft 365 Defender.

You need to identify all the entities affected by an incident.

Which tab should you use in the Microsoft 365 Defender portal?

Options:

A.

Investigations

B.

Devices

C.

Evidence and Response

D.

Alerts

Page: 7 / 11
Exam Code: SC-200
Exam Name: Microsoft Security Operations Analyst
Last Update: May 16, 2024
Questions: 250
SC-200 pdf

SC-200 PDF

$31.5  $90
SC-200 Engine

SC-200 Testing Engine

$36.75  $105
SC-200 PDF + Engine

SC-200 PDF + Testing Engine

$49  $140