Exam SC-200 topic 5 question 20 discussion

HOTSPOT
-

You have a Microsoft 365 subscription that contains three users named User1, User2 and User3 and the resources shown in the following table.



You have a Microsoft Defender XDR detection rule named Rule1 that has the following configurations:

• Scope:DevGroup1
• File hash: File1.exe
• Actions
o Devices: Collect investigation package
o User: Mark as compromised
o Files: Block

Each user attempts to run File1.exe on their device.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Suggested Answer: