Microsoft Updated SC-200 Exam Questions and Answers by yaqub

You have an Azure subscription.

You need to stream the Microsoft Graph activity logs to a third-party security information and event management (SIEM) tool. The solution must minimize administrative effort.

To where should you stream the logs?

You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR.

You need to create a hunting query in KQL that meets the following requirements:

• Identifies any devices That received an email containing an attachment named File1 .pdf during the last 12 hours and opened the attachment.

• Minimizes the resources required to run the query.

How should you complete the query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Your company uses line-of-business apps that contain Microsoft Office VBA macros.

You plan to enable protection against downloading and running additional payloads from the Office VBA macros as additional child processes.

You need to identify which Office VBA macros might be affected.

Which two commands can you run to achieve the goal? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

You need to meet the Microsoft Sentinel requirements for collecting Windows Security event logs. What should you do? To answer, select the appropriate options in the answer area. NOTE Each correct selection is worth one point.