Microsoft Exam SC-200 Topic 2 Question 63 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 63
Topic #: 2

[All SC-200 Questions]

You have a Microsoft 365 B5 subscription that uses Microsoft Defender XDR. You are investigating an incident

You need to review the incident tasks that were performed. What can you use on the Incident page?

ATasks only

BTasks and Activity log only

CTasks and Alert timeline only

DTasks, Activity log, and Alert timeline

Show Suggested Answer

Suggested Answer: D

by Dalene at Dec 26, 2023, 09:00 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Emmett

1 months ago

I bet the guy who wrote this question was just waiting for someone to pick A and then be like, 'Bro, do you even security audit?'

upvoted 0 times

...

Haydee

1 months ago

D all the way, baby! You can't be a Microsoft 365 ninja without the full incident investigation toolkit.

upvoted 0 times

Cassie

13 days ago

D is the most comprehensive choice. It's important to have all the information at your fingertips when investigating an incident.

upvoted 0 times

...

My

15 days ago

I think D is the best option too. Having access to the tasks, activity log, and alert timeline gives you a comprehensive view of what happened.

upvoted 0 times

...

Pearlie

16 days ago

I agree, D is definitely the way to go. You need all the tools available to properly investigate an incident.

upvoted 0 times

...

Jeniffer

1 months ago

Hmm, I was going with C at first, but after thinking about it, I agree that D is the way to go. Gotta have that Activity log!

upvoted 0 times

Raymon

15 days ago

I agree, D is the most complete option with Tasks, Activity log, and Alert timeline.

upvoted 0 times

...

Kizzy

28 days ago

Yeah, D is the way to go. It gives a comprehensive view of the incident.

upvoted 0 times

...

Dorcas

1 months ago

I think D is the best option. It includes all the necessary information.

upvoted 0 times

...

Ayesha

2 months ago

I'm not sure, but I think Tasks and Alert timeline might be enough to review the incident tasks.

upvoted 0 times

...

Denae

2 months ago

Option B seems too limited. I'm going with D to get the full picture of what happened.

upvoted 0 times

Therese

1 months ago

I think D is the way to go too. It's important to have all the information available.

upvoted 0 times

...

Latanya

1 months ago

I agree, D is the best option to get a comprehensive view of the incident.

upvoted 0 times

...

Dominic

1 months ago

Yeah, it's important to have access to all the information to properly investigate.

upvoted 0 times

...

Cassie

2 months ago

I agree, D gives a more comprehensive view of the incident.

upvoted 0 times

...

Sherron

2 months ago

I think the correct answer is D. Tasks, Activity log, and Alert timeline provide the most comprehensive view of the incident investigation.

upvoted 0 times

...

Nathan

2 months ago

I agree with Muriel, having access to all three would provide a comprehensive view of the incident.

upvoted 0 times

...

Muriel

3 months ago

I think we can use Tasks, Activity log, and Alert timeline on the Incident page.

upvoted 0 times

...

Dorothy

3 months ago

I'm not sure, but I think Tasks and Alert timeline might be enough to review the incident tasks.

upvoted 0 times

...

Leslie

3 months ago

I agree with Daren, having access to all three would provide a comprehensive view of the incident.

upvoted 0 times

...

Daren

3 months ago

I think we can use Tasks, Activity log, and Alert timeline on the Incident page.

upvoted 0 times

...