Q1. You have a Microsoft 365 subscription that uses Microsoft Defender XDR. You discover that when Microsoft Defender for Endpoint generates alerts for a commonly used executable file, it causes alert fatigue. You need to tune the alerts. Which two actions can an alert tuning rule perform for the alerts? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.
A.delete
B. hide
C. resolve
D. merge
E. assign
Correct Answer: B, C
Q2. You have a Microsoft 365 subscription that contains the following resources: * 100 users that are assigned a Microsoft 365 E5 license * 100 Windows 11 devices that are joined to the Microsoft Entra tenant The users access their Microsoft Exchange Online mailbox by using Outlook on the web. You need to ensure that if a user account is compromised, the Outlook on the web session token can be revoked. What should you configure?
A.Microsoft Entra ID Protection
B. Microsoft Entra Verified ID
C. a Conditional Access policy in Microsoft Entra
D. security defaults in Microsoft Entra
Correct Answer: C
Q3. You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR and contains a user named User1. You need to ensure that User1 can manage Microsoft Defender XDR custom detection rules and Endpoint security policies. The solution must follow the principle of least privilege. Which role should you assign to User1?
A.Desktop Analytics Administrator
B. Security Operator
C. Security Administrator
D. Cloud Device Administrator
Correct Answer: C
Q4. You have a Microsoft 365 E5 subscription that contains a device named Device 1. Device 1 is enrolled in Microsoft Defender for End point. Device1 reports an incident that includes a file named File1 exe as evidence. You initiate the Collect Investigation Package action and download the ZIP file. You need to identify the first and last time File1.exe was executed. What should you review in the investigation package?
A.Processes
B. Scheduled tasks
C. Autoruns
D. Security event log
E. Prefetch files
Correct Answer: E
$ 39
Leslie –
ExamTopics Pro made my SC-200 Exam prep so much easier—their practice questions and materials are absolutely top-notch