SC-200 Quiz

There are various components in DLP. Which among the following classifies as a document, and which component can protect content in locations like SharePoint Online?

• Sensitive info types and Access Policy

• Access Policy and DLP Policy

• Sensitivity label and DLP Policy

• DLP Policy and Retention Policy

Tags

cloud security

Your organization uses Microsoft defender for cloud. In Microsoft defender for cloud, you want to see the topology of your workloads. Which feature of Defender enables you to see it:

• Secure Score

• Inventory

• Network map

• Biometric analytics

Tags

Cloud security

Your organization has Microsoft 365 Defender, Microsoft Defender for Endpoint. Your organization need you to do an in-depth investigation and take immediate response action on identified threats in real-time? What should you use:

• Hunt for emerging threats

• Live device investigation manager

• Live response

• Security operations

Which live response basic command is used to Initiates a live response session to the device?

• connect

•  processes

•  connections

• Init

You have Microsoft Defender for Endpoint. In Indicators, which file type and type is used to upload and accepted type?

• CSV and Certificates

• CSV and Code data

• XML and Certificates

• JSON and Email subject line

What types of risks are there in Azure AD?

• User and sign-in risks

• Credentials and identity risks

• Sign-in and identity risk

• User and identity risks

Your organization has Microsoft Defender for Cloud. You need to protect against identity risk. Your organization’s specialist expertise is in retail and not a security specialist. What can you use to protect against identity risk?

• Security Center

• Security manager

• Identity manager

• Azure AD Identity Protection

Your organization have Microsoft Defender and Microsoft Cloud App Security. You have sensitive data which contain users details such as card numbers, etc. You plan to create a policy that can help to protect sensitive information. You plan to use a data loss prevention (DLP) policy to protect.

What will you use to detect sensitive information/data, and in which document is it?

• SharePoint search

• Document Scanner

• Hunting query in Microsoft Defender

• Microsoft Purview

Your organization has Microsoft defender for cloud. You need to investigate potential cyberattack, and the sooner you identify better off your organization will be. You are receiving alerts. What will you use to investigate automatically and respond with a set of security playbooks when an alert triggered?

• Threat mitigation

• Automated investigation and response (AIR)

• Remediate

• Automated alert and response (AAR)

Your organization has a Microsoft 365 subscription that uses Microsoft Defender for Office 365. You have configured Cloud App Security, and you have sensitive information, so you have used DLP to protect. Which type of policy is used?

• Access Policy

• Session Policy

• Anomaly detection policy

• File Policy