Free Microsoft SC-200 Exam Questions

Question 1

You have an Azure subscription that contains a Microsoft Sentinel workspace. The workspace contains a Microsoft Defender for Cloud data connector.

You need to customize which details will be included when an alert is created for a specific event.

What should you do?

A : Modify the properties of the connector.

B : Create a Data Collection Rule (DCR).

C : Create a scheduled query rule.

D : Enable User and Entity Behavior Analytics (UEBA)

Answer: C

Question 2

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.You initiate a live response session on each device. You need to collect a Defender for Endpoint investigation package from each device.On which devices can you collect the package by running advanced live response commands from the command-line interface (CLI)?

A : Device1 and Device2 only

B : Device1, Device2, and Device3 only

C : Device3 and Device4 only

D : Device1, Devke2, Device3, and Device4

Answer: B

Question 3

You have a Microsoft 365 subscription.You have 1,000 Windows devices that have a third-party antivirus product installed and MicrosoftDefender Antivirus in passive mode. You need to ensure that the devices are protected frommalicious artifacts that were undetected by the third-party antivirus product. Solution: You configureControlled folder access. Does this meet the goal?

A : Yes

B : No

Answer: B

Question 4

You have a Microsoft 365 subscription that uses Microsoft 365 Defender.

You need to identify all the entities affected by an incident.

Which tab should you use in the Microsoft 365 Defender portal?

A : vestigations

B : vices

C : idence and Response

D : erts

Answer: C

Question 5

You have a Microsoft 365 subscription.You have 1,000 Windows devices that have a third-party antivirus product installed and MicrosoftDefender Antivirus in passive mode. You need to ensure that the devices are protected frommalicious artifacts that were undetected by the third-party antivirus product. Solution: You configureControlled folder access. Does this meet the goal?

A : Yes

B : No

Answer: B