SC-200 Part 1- Microsoft Defender

Which report lists the software vulnerabilities your devices are exposed to by listing the Common Vulnerabilities and Exposures (CVE) ID?

• Event Timeline
• Weakness
• Severity level graphs

Which file type can be used to upload Indicators?

• JSON
• XML
• CSV

Which filter is included as part of an Alert notification rule?

• Alert Severity
• Account
• Subject IDs

A security operations analyst needs to exclude a custom executable file c:\myapp\myapp.exe, which exclusion type should they use?

• File
• Extension
• folder

A security operations analyst can create a custom detection from which of the following?

• An alert
• Advanced Hunting
• An incident

You can classify an Incident as which of the following?

• High alert
• Test alert
• True alert

The Devices page shows information from which Defender product?

• Microsoft Cloud App Security
• Microsoft Defender for Identity
• Microsoft Defender for Endpoint

Which DLP component is used to classify a document?

• Sensitive info types
• Sensitivity label
• Retention Policy

In Cloud App Security, which types of Policy is used for DLP?

• File Policy
• Activity Policy
• Access Policy

Which DLP component has the logic to protect content in locations such as SharePoint Online?

• Sensitivity label
• DLP Policy
• Sensitive info types