exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 1 question 34 discussion

Actual exam question from Microsoft's SC-200
Question #: 34
Topic #: 1
[All SC-200 Questions]

You have a Microsoft 365 subscription that uses Microsoft 365 Defender.

You plan to create a hunting query from Microsoft Defender.

You need to create a custom tracked query that will be used to assess the threat status of the subscription.

From the Microsoft 365 Defender portal, which page should you use to create the query?

  • A. Threat analytics
  • B. Advanced Hunting
  • C. Explorer
  • D. Policies & rules
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
yoton
Highly Voted 2 years, 4 months ago
https://learn.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-overview?view=o365-worldwide "Use Advance mode if you're comfortable creating custom queries." Answer is B
upvoted 12 times
...
ACSC
Highly Voted 2 years, 4 months ago
Selected Answer: B
https://learn.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-modes?view=o365-worldwide#get-started-with-guided-hunting-mode
upvoted 5 times
...
Nikki0222
Most Recent 7 months, 2 weeks ago
B correct
upvoted 2 times
...
Baz10
1 year, 3 months ago
Selected Answer: B
Lol its not a trick question dw
upvoted 1 times
...
chepeerick
1 year, 7 months ago
the option B
upvoted 1 times
...
jamclash
1 year, 8 months ago
in exam 9/20/23
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...