Microsoft Exam SC-200 Topic 1 Question 88 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 88
Topic #: 1

You have a Microsoft 365 subscription that uses Microsoft Defender XDR.

You are investigating an attacker that is known to use the Microsoft Graph API as an attack vector. The attacker performs the tactics shown the following table.

You need to search for malicious activities in your organization.

Which tactics can you analyze by using the MicrosoftGraphActivityLogs table?

ATactic? only

BTactic1 and Tactic2 only

CTac1ic2 and Tactic3 only

DTaclic1. Tac1ic2. andTactic3

Show Suggested Answer

Suggested Answer: B

by Lisha at Dec 09, 2024, 02:59 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Tomoko

5 days ago

Ah, the joys of Microsoft 365 security. Chasing down those crafty attackers is like a game of cat and mouse, but I'm up for the challenge. Now, which tactics can I dig into using that MicrosoftGraphActivityLogs table? I'm feeling lucky!

upvoted 0 times

...

1 months ago

Hmm, let me think about this. I'm pretty sure the Microsoft Graph API can be used to track down those sneaky attackers. But which tactics can we analyze using the MicrosoftGraphActivityLogs table? Tricky question, but I'm ready to give it my best shot.

upvoted 0 times

Clay

2 days ago

So, the answer is B) Tactic1 and Tactic2 only.

upvoted 0 times

...

Celestina

8 days ago

I agree, those are the tactics we should focus on to track down the attacker.

upvoted 0 times

...

Leoma

26 days ago

I think we can analyze Tactic1 and Tactic2 using the MicrosoftGraphActivityLogs table.

upvoted 0 times

...