SC-200 Practice Questions - Microsoft Certified Security Operations Analyst Associate (SC-200) Exam

Access More Questions

Which Microsoft Defender for Endpoint capability automatically isolates a compromised device, suspends user accounts, or blocks a malicious URL across the tenant when high-confidence signals are detected?

Automated investigation and response (AIR) Automatic attack disruption Endpoint DLP Network protection

Correct Answer:

Automatic attack disruption

Access more questions from this quiz

Continue to SC-200 Practice Questions - Microsoft Certified Security Operations Analyst Associate (SC-200) Exam for more practice questions and the full quiz experience.

Access More Questions