ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 1 question 65 discussion

Actual exam question from Microsoft's SC-200
Question #: 65
Topic #: 1
[All SC-200 Questions]

You have a Microsoft 365 subscription that uses Microsoft Defender XDR.

You need to implement deception rules. The solution must ensure that you can limit the scope of the rules.

What should you create first?

  • A. device groups
  • B. device tags
  • C. honeytoken entity tags
  • D. sensitive entity tags
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by ctshepard at Dec. 26, 2024, 4:37 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Dogfather
Highly Voted 5 months ago
Selected Answer: B
I agree, B is correct, When configuring a deception role there's no option to use a device group, only device tags. Source: https://learn.microsoft.com/en-us/defender-xdr/configure-deception
upvoted 5 times
...
HAjouz
Most Recent 2 months, 1 week ago
Selected Answer: B
B is the right answer
upvoted 2 times
...
ExamSC200
3 months, 1 week ago
Selected Answer: B
Device groups are useful for organizing devices but aren't specifically designed to limit the scope of deception rules. Device tags offer more granular control.
upvoted 3 times
...
RonWonkers
5 months ago
Selected Answer: B
B, first you tag a device based on characterics for instance the title, then you group based on tags.
upvoted 4 times
...
WinstonN
5 months ago
Selected Answer: B
B is correct. Check the scoping. its Device Tags. https://learn.microsoft.com/en-us/defender-xdr/configure-deception
upvoted 3 times
...
ctshepard
5 months, 2 weeks ago
Selected Answer: A
A is correct because once the devices are grouped, they can then be tagged.
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel