Microsoft Exam SC-200 Topic 2 Question 63 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 63
Topic #: 2

[All SC-200 Questions]

You have a Microsoft 365 B5 subscription that uses Microsoft Defender XDR. You are investigating an incident

You need to review the incident tasks that were performed. What can you use on the Incident page?

ATasks only

BTasks and Activity log only

CTasks and Alert timeline only

DTasks, Activity log, and Alert timeline

Show Suggested Answer

Suggested Answer: D

by Dalene at Dec 26, 2023, 09:00 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

D all the way, baby! You can't be a Microsoft 365 ninja without the full incident investigation toolkit.

upvoted 0 times

...

4 days ago

Hmm, I was going with C at first, but after thinking about it, I agree that D is the way to go. Gotta have that Activity log!

upvoted 0 times

...

25 days ago

I'm not sure, but I think Tasks and Alert timeline might be enough to review the incident tasks.

upvoted 0 times

...

1 months ago

I think we can use Tasks, Activity log, and Alert timeline on the Incident page.

upvoted 0 times

...