Microsoft Exam SC-200 Topic 4 Question 75 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 75
Topic #: 4

[All SC-200 Questions]

You have a Microsoft Sentinel workspace named SW1.

In SW1, you investigate an incident that is associated with the following entities:

* Host

* IP address

* User account

* Malware name

Which entity can be labeled as an indicator of compromise (loC) directly from the incident s page?

Amalware name

Bhost

Cuser account

DIP address

Show Suggested Answer

Suggested Answer: D

by Lawanda at Jun 28, 2024, 06:13 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Chaya

9 months ago

Wait, I thought the incident was associated with a toaster. Isn't that an indicator of compromise these days? No? Okay, fine, I'll go with the malware name then.

upvoted 0 times

...

Paris

9 months ago

I'm just gonna go with the most obvious choice here - the malware name. It's like the criminal's calling card, right? Can't miss that one!

upvoted 0 times

Lovetta

8 months ago

Host could also be a potential indicator of compromise, depending on the situation.

upvoted 0 times

...

Nydia

9 months ago

B) host

upvoted 0 times

...

Laurene

9 months ago

Yeah, that's a good choice. Malware name is a common indicator of compromise.

upvoted 0 times

...

Hubert

9 months ago

A) malware name

upvoted 0 times

...

Tesha

10 months ago

This is a tough one, but I'm gonna have to go with option D. IP addresses don't lie, you know? They're like the digital fingerprints of the incident.

upvoted 0 times

Brinda

8 months ago

I agree with User2, I'll also choose option D. IP address is crucial in identifying the source of the incident.

upvoted 0 times

...

Edna

8 months ago

I agree with User2, I'll also choose option D. IP address is crucial in identifying the source of the incident.

upvoted 0 times

...

Dalene

9 months ago

I'm leaning towards option D. IP address can definitely provide valuable information in this case.

upvoted 0 times

...

Rodney

9 months ago

I'm leaning towards option D. IP address can definitely provide valuable information in this situation.

upvoted 0 times

...

Tamra

9 months ago

I think I'll go with option A. Malware name seems like a clear indicator of compromise.

upvoted 0 times

...

Peggie

9 months ago

I think I'll go with option A. Malware name seems like a clear indicator of compromise.

upvoted 0 times

...

Valda

10 months ago

Oh, come on! The user account is the real IoC. Gotta catch that sneaky insider, am I right?

upvoted 0 times

Jina

9 months ago

Troy: I agree, insiders can be the biggest threat.

upvoted 0 times

...

Glory

9 months ago

Nan: Definitely, the user account is the key indicator here.

upvoted 0 times

...

Wilson

9 months ago

D) IP address

upvoted 0 times

...

Troy

9 months ago

C) user account

upvoted 0 times

...

Nan

9 months ago

B) host

upvoted 0 times

...

Cathrine

9 months ago

A) malware name

upvoted 0 times

...

Emily

10 months ago

I think the IP address is the most likely indicator of compromise in this scenario.

upvoted 0 times

...

Roxane

10 months ago

But the host could also be a potential indicator, don't you think?

upvoted 0 times

...

Raymon

10 months ago

Hmm, I'm going to go with the host. It's the first thing you notice when something's not right, right?

upvoted 0 times

...

Myra

10 months ago

I think the IP address could be an IoC as well. You know, the hacker's calling card and all that.

upvoted 0 times

...

Adolph

10 months ago

The malware name is definitely the indicator of compromise. It's like the smoking gun of the incident!

upvoted 0 times

Stevie

9 months ago

B) host

upvoted 0 times

...

Delbert

9 months ago

Yes, the malware name is a clear indicator of compromise.

upvoted 0 times

...

Pearline

10 months ago

B) host

upvoted 0 times

...

Yesenia

10 months ago

Yes, the malware name is a clear indicator of compromise.

upvoted 0 times

...

Lou

10 months ago

A) malware name

upvoted 0 times

...

Carma

10 months ago

A) malware name

upvoted 0 times

...

Carmela

10 months ago

I disagree, I believe the user account is the indicator of compromise.

upvoted 0 times

...

Roxane

10 months ago

I think the indicator of compromise could be the malware name.

upvoted 0 times

...