Free Preparation Discussions
MENU
Microsoft SC-200 Exam Questions
- Topic 1: Manage a security operations environment: This topic of the exam covers how to configure settings in Microsoft Defender XDR, Manage assets and environments, Design and configure a Microsoft Sentinel workspace, and Ingest data sources in Microsoft Sentinel.
- Topic 2: Configure protections and detections: This section deals with configuring protections in Microsoft Defender security technologies, configuring detection in Microsoft Defender XDR, and configuring detections in Microsoft Sentinel.
- Topic 3: Manage incident response: This section is about responding to alerts and incidents in Microsoft Defender XDR, it also covers responding to alerts and incidents identified by Microsoft Defender for Endpoint as well as configuring security orchestration, automation, and response (SOAR) in Microsoft Sentinel.
- Topic 4: Manage security threats: In this topic, students learn about hunting threats by using Microsoft Defender XDR and Microsoft Sentinel. Moreover, the topic focuses on creating and configuring Microsoft Sentinel workbooks.
Free Microsoft SC-200 Exam Actual Questions
Note: Premium Questions for SC-200 were last updated On Apr. 24, 2025 (see below)
You need to recommend a solution to meet the technical requirements for the Azure virtual machines. What should you include in the recommendation?
You have an Azure subscription that uses Microsoft Defender XDR.
From the Microsoft Defender portal, you perform an audit search and export the results as a file named Filel.csv that contains 10,000 rows.
You use Microsoft Excel to perform Get & Transform Data operations to parse the AuditData column from Filel.csv. The operations fail to generate columns for specific JSON properties.
You need to ensure that Excel generates columns for the specific JSON properties in the audit search results.
Solution: From Defender, you modify the search criteria of the audit search to reduce the number of returned records, and then you export the results. From Excel, you perform the Get & Transform Data operations by using the new export.
Does this meet the requirement?
You have a Microsoft 365 subscription.
You have 1,000 Windows devices that have a third-party antivirus product installed and Microsoft Defender Antivirus in passive mode. You need to ensure that the devices are protected from malicious artifacts that were undetected by the third-party antivirus product. Solution: You configure Controlled folder access. Does this meet the goal?
You have 500 on-premises devices.
You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR.
You onboard 100 devices to Microsoft Defender XDR.
You need to identify any unmanaged on-premises devices. The solution must ensure that only specific onboarded devices perform the discovery.
What should you do first?
You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.
You initiate a live response session on each device.
You need to collect a Defender for Endpoint investigation package from each device.
On which devices can you collect the package by running advanced live response commands from the command-line interface (CLI)?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Annabelle
25 days agoRoxane
2 months agoPatrick
3 months agoLettie
3 months agoHorace
4 months agoMacy
4 months agoAlishia
5 months agoAdell
5 months agoJennifer
5 months agoLucina
6 months agoAsha
6 months agoRyan
6 months agoMichal
7 months agoLeigha
7 months agoLinsey
7 months agoDell
7 months agoSantos
7 months agoSabra
8 months agoClaudio
8 months agoMila
8 months agoJoni
9 months agoDella
10 months agoMaryann
10 months agoGerald
10 months agoTenesha
10 months agodarrena
11 months agokalasan
11 months ago