Microsoft Exam SC-200 Topic 3 Question 82 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 82
Topic #: 3

You have 500 on-premises Windows 11 devices that use Microsoft Defender for Endpoint

You enable Network device discovery.

You need to create a hunting query that will identify discovered network devices and return the identity of the onboarded device that discovered each network device.

Which built-in function should you use?

Acurrent_cluster,endpoint()

BDeviceFromIP ()

Cnext ()

DSeenBy ()

Show Suggested Answer

Suggested Answer: B

by Margurite at Sep 17, 2024, 01:34 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lisandra

6 months ago

Hmm, I wonder if we can use the 'next()' function to get the devices in a specific order. That could be a useful twist on the problem.

upvoted 0 times

...

Arlene

6 months ago

Haha, I bet the correct answer is actually 'all of the above' and the exam is just trying to trick us. But I'll go with SeenBy() just to be safe.

upvoted 0 times

Gene

5 months ago

Let's go with SeenBy() and hope for the best.

upvoted 0 times

...

Tamala

5 months ago

I'm not so sure, I think DeviceFromIP() might be the better option.

upvoted 0 times

...

Lashaun

6 months ago

I think SeenBy() is the right choice too.

upvoted 0 times

...

Marge

6 months ago

I'm going with option D. SeenBy() is the way to go, no doubt about it. It's like a superpower for this kind of problem!

upvoted 0 times

Arlean

5 months ago

SeenBy() is the most suitable option for identifying discovered network devices and the onboarded device that discovered each one.

upvoted 0 times

...

Chandra

5 months ago

I agree, SeenBy() is the perfect function to use in this scenario.

upvoted 0 times

...

Golda

6 months ago

Option D is definitely the best choice. SeenBy() is the way to go for this hunting query.

upvoted 0 times

...

Helga

7 months ago

Hmm, I see your point. Let's review the question again to make sure

upvoted 0 times

...

Dianne

7 months ago

I disagree, I believe the correct answer is D) SeenBy()

upvoted 0 times

...

Quinn

7 months ago

Ah, but what about the SeenBy() function? Wouldn't that give us the exact information we need without having to do any extra work?

upvoted 0 times

Adelle

6 months ago

User2

upvoted 0 times

...

Candra

7 months ago

User1

upvoted 0 times

...

Helga

7 months ago

I think the answer is B) DeviceFromIP()

upvoted 0 times

...

Mariann

7 months ago

I think we should use the DeviceFromIP() function to get the identity of the onboarded device that discovered each network device. It's designed for this type of scenario.

upvoted 0 times

Skye

6 months ago

I think DeviceFromIP() would be the most appropriate function to use in this case.

upvoted 0 times

...

Skye

6 months ago

I agree, DeviceFromIP() function seems like the right choice for this task.

upvoted 0 times

...