Exam SC-200 topic 5 question 18 discussion

Actual exam question from Microsoft's SC-200

Question #: 18
Topic #: 5

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the hosts shown in the following table.

You have indicators in Microsoft Defender for Endpoint as shown in the following table.

ID1 and ID2 reference the same file as ID3.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by sapphire at Nov. 11, 2024, 12:05 p.m.

Comments

Submit Cancel

sapphire

Highly Voted 7 months ago

correct answer

upvoted 6 times

MarcoHurry

6 months ago

I don't agress. My chosen answer: NNY About the first question, in https://learn.microsoft.com/en-us/defender-endpoint/indicator-file Microsoft says: "If there are conflicting file IoC policies with the same enforcement type and target, the policy of the more secure hash will be applied. An SHA-256 file hash IoC policy will win over an SHA-1 file hash IoC policy, which will win over an MD5 file hash IoC policy if the hash types define the same file. This is always true regardless of the device group."

upvoted 12 times

Optimizor_IT

2 months, 1 week ago

Sorry, my bad, the action for the SHA-265 file hash for that DG is allow, so you are right.

upvoted 1 times

...

Onimole

3 months ago

ID1 and ID2 reference the same file as ID3.

upvoted 2 times

...