Microsoft Exam SC-200 Topic 4 Question 74 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 74
Topic #: 4

You have a Microsoft 365 E5 subscription that contains 100 Linux devices. The devices are onboarded to Microsoft Defender 365. You need to initiate the collection of investigation packages from the devices by using the Microsoft 365 Defender portal. Which response action should you use?

ARun antivirus scan

BInitiate Automated Investigation

CCollect investigation package

DInitiate Live Response Session

Show Suggested Answer

Suggested Answer: B

by Fredric at Jun 24, 2024, 10:20 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Doug

12 days ago

Well, 'Run antivirus scan' might be the easiest option, but where's the fun in that? I say go big or go home - 'Collect investigation package' all the way!

upvoted 0 times

...

Bette

13 days ago

Alright, time to put on my detective hat. 'Initiate Automated Investigation' seems like the smart choice to get to the bottom of this mystery. Wonder if they have any secret Linux spy software we need to uncover.

upvoted 0 times

...

Leatha

19 days ago

Ooh, 'Initiate Live Response Session' sounds like the perfect way to get up close and personal with those Linux machines. Just don't forget to bring your hazmat suit, you never know what kind of bugs you might find!

upvoted 0 times

...