Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 1 question 35 discussion

Actual exam question from Microsoft's SC-200

Question #: 35
Topic #: 1

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint.

You need to add threat indicators for all the IP addresses in a range of 171.23.34.32-171.23.34.63. The solution must minimize administrative effort.

What should you do in the Microsoft 365 Defender portal?

A. Create an import file that contains the individual IP addresses in the range. Select Import and import the file.
B. Create an import file that contains the IP address of 171.23.34.32/27. Select Import and import the file.
C. Select Add indicator and set the IP address to 171.23.34.32-171.23.34.63.
D. Select Add indicator and set the IP address to 171.23.34.32/27.

Show Suggested Answer

Suggested Answer: A 🗳️

by Valunchai at Feb. 19, 2023, 10:15 a.m.

Comments

Submit Cancel

RobertDuval

Highly Voted 2 years, 3 months ago

In Exam today (21 April 2023)

upvoted 15 times

Bit_Shady

4 months, 1 week ago

Still recent, in exam today (25 mar 2025)

upvoted 1 times

Olu1

4 weeks, 1 day ago

How many questions was the exams

upvoted 1 times

TechyStacy

2 weeks, 5 days ago

Was in exam 4th July,2025. Scored 857. 60 questions

upvoted 1 times

Olu1

6 days, 13 hours ago

How many scenario questions & are all the questions here

upvoted 1 times

...

Valunchai

Highly Voted 2 years, 5 months ago

Selected Answer: A

Test on lab

upvoted 14 times

...

Bunz

Most Recent 1 month, 1 week ago

Selected Answer: D

IP Address 171.23.34.32/27 is valid. Reason: CIDR notation is now supported in Defender.

upvoted 2 times

...

VOGSnda

1 month, 2 weeks ago

Selected Answer: A

IP Address 171.23.34.32/27 is invalid. Reason: CIDR notation is not supported VOG, validated From Chile

upvoted 1 times

...

diego205

1 month, 2 weeks ago

Selected Answer: D

Why the correct answer is D: Select Add indicator and set the IP address to 171.23.34.32/27 Technical explanation: The IP range 171.23.34.32 to 171.23.34.63 is equivalent to the subnet 171.23.34.32/27. A /27 subnet covers 32 IP addresses. The range 171.23.34.32 - 171.23.34.63 includes exactly 32 IPs. This means that with a single CIDR entry, you can represent the entire range.

upvoted 3 times

...

9fd5d85

3 months ago

Selected Answer: A

The correct answer is A. Create an import file that contains the individual IP addresses in the range. Select Import and import the file

upvoted 2 times

...

HAjouz

4 months ago

Selected Answer: D

A is correct but not least admin work

upvoted 1 times

...

dejo

9 months, 1 week ago

A is corrected, tested!

upvoted 2 times

...

Nikki0222

9 months, 1 week ago

A correct

upvoted 3 times

...

2b0cac4

9 months, 3 weeks ago

Selected Answer: D

Select Add indicator and set the IP address to 171.23.34.32/27. The question asks what is going to save the admin time, entering IPs one at a time as suggested by A isn't the correct option.

upvoted 5 times

1375514

8 months ago

CIDR is not supported, so listing them out then uploading the file is correct.

upvoted 5 times

...

1a144a0

11 months, 1 week ago

Selected Answer: A

Classless Inter-Domain Routing (CIDR) notation for IP addresses is not supported https://learn.microsoft.com/en-us/defender-endpoint/indicator-manage

upvoted 2 times

...

Str4int

1 year ago

answer A. lassless Inter-Domain Routing (CIDR) notation for IP addresses isn't supported.

upvoted 1 times

...

emartiy

1 year, 1 month ago

Selected Answer: C

What Microsoft Copilot AI answers for this question: To add threat indicators for all the IP addresses in the range of 171.23.34.32-171.23.34.63 in Microsoft 365 Defender, follow these steps: Navigate to the Indicators setting: In the Microsoft 365 Defender portal, go to Settings. Choose Cloud Apps. Under System, select IP address ranges. Add the IP address range: Select Add IP address range. Specify the following details: Name: Give a name to your IP range (used for management purposes). IP Address Range: Enter the range as 171.23.34.32-171.23.34.63. C is the correct answer

upvoted 1 times

sergioandreslq

10 months ago

1. Copilot anwered wrong, the question is for MDE, In Copilot answer you are refering to MDCA which is E5. MDE is a feature for Business Premium and E3 license. 2. Wrong B: CIDR is not supported, you need to add ip one-by-one 3. Wrong C, you will need to create one-by-one ip which is a high administrative task. 4. Wrong D: CIDR is not supported, you need to add ip one-by-one The correct answer is A. upload a file with all the ips.

upvoted 2 times

...

emartiy

1 year, 1 month ago

D. Select Add indicator and set the IP address to 171.23.34.32/27. (current addition options support this)

upvoted 1 times

sergioandreslq

10 months ago

Wrong D. Reason: Classless Inter-Domain Routing (CIDR) notation for IP addresses is NOT supported https://learn.microsoft.com/en-us/defender-endpoint/indicator-manage

upvoted 1 times

...

Ramye

1 year, 5 months ago

Selected Answer: A

C and D are not supported. Tested and the system does not allow using the giving range format on these options. Since D is not supported hence, B is not supported either.

upvoted 1 times

...

GermanGerman

1 year, 7 months ago

Selected Answer: B

This approach is the most efficient because: The IP address range 171.23.34.32-171.23.34.63 can be represented using the CIDR (Classless Inter-Domain Routing) notation as 171.23.34.32/27. This notation efficiently covers all the IPs in the specified range. By creating an import file with this CIDR notation and importing it, you can add all the IP addresses in the range at once, significantly reducing the administrative effort compared to adding each IP address individually.

upvoted 2 times

...

kabooze

1 year, 9 months ago

Selected Answer: A

it doesn't recognize ranges or cidr notation

upvoted 1 times

...

chepeerick

1 year, 9 months ago

correct

upvoted 2 times

...

Load full discussion...