Free Preparation Discussions
MENU
Microsoft SC-200 Exam Questions
- Topic 1: Manage a security operations environment: This topic of the exam covers how to configure settings in Microsoft Defender XDR, Manage assets and environments, Design and configure a Microsoft Sentinel workspace, and Ingest data sources in Microsoft Sentinel.
- Topic 2: Configure protections and detections: This section deals with configuring protections in Microsoft Defender security technologies, configuring detection in Microsoft Defender XDR, and configuring detections in Microsoft Sentinel.
- Topic 3: Manage incident response: This section is about responding to alerts and incidents in Microsoft Defender XDR, it also covers responding to alerts and incidents identified by Microsoft Defender for Endpoint as well as configuring security orchestration, automation, and response (SOAR) in Microsoft Sentinel.
- Topic 4: Perform threat hunting: This section of the exam covers hunting for threats by using KQL and Microsoft Sentinel. It also involves analyzing and interpreting data by using workbooks.
Free Microsoft SC-200 Exam Actual Questions
Note: Premium Questions for SC-200 were last updated On Oct. 10, 2024 (see below)
You have a Microsoft 365 E5 subscription that contains a device named Device 1. Device 1 is enrolled in Microsoft Defender for End point.
Device1 reports an incident that includes a file named File1 exe as evidence.
You initiate the Collect Investigation Package action and download the ZIP file.
You need to identify the first and last time File1.exe was executed.
What should you review in the investigation package?
You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint Plan 2 and contains 500 Windows devices. As part of an incident investigation, you identify the following suspected malware files:
* sys
* docx
* xlsx
You need to create indicator hashes to block users from downloading the files to the devices. Which files can you block by using the indicator hashes?
You have an Azure subscription that contains a resource group named RG1. RG1 contains a Microsoft Sentinel workspace. The subscription is linked to a Microsoft Entra tenant that contains a user named User1.
You need to ensure that User1 can deploy and customize Microsoft Sentine1 workbook templates. The solution must follow the principle of least privilege.
Which role should you assign to User1 for RG1?
You have 500 on-premises Windows 11 devices that use Microsoft Defender for Endpoint
You enable Network device discovery.
You need to create a hunting query that will identify discovered network devices and return the identity of the onboarded device that discovered each network device.
Which built-in function should you use?
You have an Azure subscription named Sub1 that uses Microsoft Defender for Cloud.
You need to assign the PCI DSS 4.0 initiative to Sub1 and have the initiative displayed in the Defender for Cloud Regulatory compliance dashboard.
From Security policies in the Environment settings, you discover that the option to add more industry and regulatory standards is unavailable.
What should you do first?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Ryan
4 days agoMichal
11 days agoLeigha
16 days agoLinsey
18 days agoDell
1 months agoSantos
1 months agoSabra
1 months agoClaudio
2 months agoMila
2 months agoJoni
3 months agoDella
4 months agoMaryann
4 months agoGerald
4 months agoTenesha
4 months agodarrena
4 months agokalasan
4 months ago