Microsoft Exam SC-200 Topic 4 Question 74 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 74
Topic #: 4

You have a Microsoft 365 E5 subscription that contains 100 Linux devices. The devices are onboarded to Microsoft Defender 365. You need to initiate the collection of investigation packages from the devices by using the Microsoft 365 Defender portal. Which response action should you use?

ARun antivirus scan

BInitiate Automated Investigation

CCollect investigation package

DInitiate Live Response Session

Show Suggested Answer

Suggested Answer: B

by Fredric at Jun 24, 2024, 10:20 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Doug

2 months ago

Well, 'Run antivirus scan' might be the easiest option, but where's the fun in that? I say go big or go home - 'Collect investigation package' all the way!

upvoted 0 times

Edda

4 days ago

D) Initiate Live Response Session

upvoted 0 times

...

Ruthann

20 days ago

C) Collect investigation package

upvoted 0 times

...

Fausto

23 days ago

B) Initiate Automated Investigation

upvoted 0 times

...

Bette

2 months ago

Alright, time to put on my detective hat. 'Initiate Automated Investigation' seems like the smart choice to get to the bottom of this mystery. Wonder if they have any secret Linux spy software we need to uncover.

upvoted 0 times

Yuette

1 months ago

User 2: Agreed, that sounds like the best option to collect investigation packages from the devices.

upvoted 0 times

...

Mary

2 months ago

User 1: I think we should go with B) Initiate Automated Investigation.

upvoted 0 times

...

Leatha

2 months ago

Ooh, 'Initiate Live Response Session' sounds like the perfect way to get up close and personal with those Linux machines. Just don't forget to bring your hazmat suit, you never know what kind of bugs you might find!

upvoted 0 times

...