Exam SC-200 topic 1 question 36 discussion

Actual exam question from Microsoft's SC-200

Question #: 36
Topic #: 1

You have an Azure subscription that uses Microsoft Defender for Endpoint.

You need to ensure that you can allow or block a user-specified range of IP addressed and URLs.

What should you enable first in the Advanced features from the Endpoints Settings in the Microsoft 365 Defender portal?

A. custom network indicators
B. live response for servers
C. endpoint detection and response (EDR) in block mode
D. web content filtering

Show Suggested Answer

Suggested Answer: A 🗳️

by Valunchai at Feb. 19, 2023, 10:17 a.m.

Comments

Submit Cancel

Nikki0222

9 months, 3 weeks ago

A correct

upvoted 2 times

...

chepeerick

1 year, 9 months ago

option A

upvoted 2 times

...

sasasach

2 years, 5 months ago

Answer A is correct. Checked it thru MS defender for Endpoint portal. Custom network indicators Configures devices to allow or block connections to IP addresses, domains, or URLs in your custom indicator lists. To use this feature, devices must be running Windows 10 version 1709 or later. They should also have network protection in block mode and version 4.18.1906.3 or later of the antimalware platform (see KB 4052623). Note that network protection leverages reputation services that process requests in locations that might be outside of the location you have selected for your Microsoft Defender for Endpoint data.

upvoted 4 times

...

wsrudmen

2 years, 5 months ago

Selected Answer: A

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/indicator-ip-domain?view=o365-worldwide In the prerequisite for "Create indicators for IPs and URLs/domains" Ensure that Custom network indicators is enabled in Microsoft 365 Defender > Settings > Advanced features.

upvoted 4 times

...

Valunchai

2 years, 5 months ago

Selected Answer: A

Correct answer. (A)

upvoted 1 times

...