Microsoft SC-200 Exam - Topic 4 Question 84 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 84
Topic #: 4

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint Plan 2 and contains 500 Windows devices. As part of an incident investigation, you identify the following suspected malware files:

* sys

* pdf

* docx

* xlsx

You need to create indicator hashes to block users from downloading the files to the devices. Which files can you block by using the indicator hashes?

AFile1.sysonly

BFile1.sysand File3.docxonly

CFile1.sys. File3.docx, and File4jclsx only

DFile2.pdf. File3.docxr and File4.xlsx only

EFile1.sys, File2.pdf, File3.dooc, and File4.xlsx

Show Suggested Answer

Suggested Answer: A

by Stevie at Sep 17, 2024, 12:43 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bambi

4 months ago

I agree, .pdfs are usually fine unless they're malicious.

upvoted 0 times

...

Marylou

4 months ago

Wait, can you really block .pdf files? That seems odd.

upvoted 0 times

...

Lavonda

4 months ago

Definitely block the .sys files, they’re risky!

upvoted 0 times

...

Nenita

4 months ago

I think .docx and .xlsx should be safe, right?

upvoted 0 times

...

Rosalia

5 months ago

You can block .sys and .pdf files for sure.

upvoted 0 times

...

Kimberely

5 months ago

I think we can block all of them, but I’m not confident about the specifics. I need to double-check which file types are typically associated with malware.

upvoted 0 times

...

Albina

5 months ago

This question seems similar to one we practiced where we had to identify file types to block. I think .docx and .xlsx might be less risky?

upvoted 0 times

...

Herman

5 months ago

I'm not entirely sure, but I feel like we might only block the .sys and .pdf files since those are more likely to be harmful.

upvoted 0 times

...

Antonio

5 months ago

I remember we discussed that .sys files are often system files, so I think we should definitely consider blocking those.

upvoted 0 times

...

Samira

5 months ago

This seems straightforward to me. The question is asking which files can be blocked, and the answer is E - all of the file types mentioned can be blocked using indicator hashes.

upvoted 0 times

...

Francoise

5 months ago

Based on the information provided, I think the answer is B. The .sys and .docx files can be blocked using indicator hashes, but the .pdf and .xlsx files cannot.

upvoted 0 times

...

Adelina

5 months ago

I'm a bit confused on the difference between blocking individual files and blocking by file type. I'll need to make sure I understand that before selecting an answer.

upvoted 0 times

...

Markus

5 months ago

Okay, let me think this through. The question mentions .sys, .pdf, .docx, and .xlsx files, so I'm guessing the answer has to do with those file types.

upvoted 0 times

...

Truman

5 months ago

Hmm, this looks like a tricky one. I'll need to carefully read through the question and options to figure out which files can be blocked using indicator hashes.

upvoted 0 times

...

Mabelle

1 year ago

Option B is the way to go. Can't let those pesky .docx files slip through the cracks, can we? Gotta keep those devices safe from, you know, the usual suspects.

upvoted 0 times

Cruz

1 year ago

User 3: Yeah, we can't let any suspicious files like those slip through. Option B it is.

upvoted 0 times

...

Leota

1 year ago

User 2: Agreed, we need to block File1.sys and File3.docx to keep our devices safe.

upvoted 0 times

...

Shelba

1 year ago

Option B is definitely the best choice. We can't risk those .docx files causing any harm.

upvoted 0 times

...

Melina

1 year ago

Haha, better watch out for those Excel files. You never know what kind of hidden formulas they might have! But seriously, I'd go with option B.

upvoted 0 times

...

Kristofer

1 year ago

I think it's option B. The question specifically says to block the suspected malware files, and those are the only ones that match the extensions provided.

upvoted 0 times