Grok answer:
To review the incident tasks that were performed on the Incident page in Microsoft Defender XDR, you can use Tasks, Activity log, and Alert timeline.
The correct answer is: D. Tasks, Activity log, and Alert timeline
Here’s why:
Tasks: The Incident page allows you to view and manage tasks related to the incident, such as investigation or remediation actions.
Activity log: The Activity log provides a record of actions taken on the incident, including comments, status changes, and other updates, which can help track what tasks were performed.
Alert timeline: The Alert timeline shows the chronological order of alerts related to the incident, providing context for the tasks and actions taken during the investigation.
These three components together give a comprehensive view of the tasks performed and the incident's progression.
The correct answer is:
D. Tasks, Activity log, and Alert timeline
Reference:
https://learn.microsoft.com/en-us/azure/sentinel/investigate-incidents
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.SC-200 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Adel614
2 weeks, 6 days agojamspurple
1 month, 3 weeks agochiquito
3 months, 2 weeks ago