Microsoft Exam SC-200 Topic 1 Question 90 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 90
Topic #: 1

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table.

You initiate a live response session on each device.

You need to collect a Defender for Endpoint investigation package from each device.

On which devices can you collect the package by running advanced live response commands from the command-line interface (CLI)?

ADevice1 and Device2 only

BDevice1, Device2, and Device3 only

CDevice3 and Device4 only

DDevice1, Devke2, Device3, and Device4

Show Suggested Answer

Suggested Answer: B

by Emmanuel at Jan 28, 2025, 10:00 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Helga

2 days ago

Device1 and Device2 sound like your typical PCs, but Device3 and Device4 could be anything. Better check the fine print on those advanced live response commands. *chuckles*

upvoted 0 times

...

Christa

9 days ago

Hmm, I'm not so sure. What if Device4 is a Mac? Then the answer would be D, right? I'm just throwing it out there.

upvoted 0 times

...

Delfina

13 days ago

I think the answer is B. Device1, Device2, and Device3 only. Advanced live response commands can only be run on devices with supported operating systems.

upvoted 0 times

...