Microsoft
MS-102 · Question #571
You have a Microsoft 365 subscription that contains a user named User1. You need to ensure that User1 can gather and summarize a custom set of data from signals in the Microsoft Defender XDR environme
Sign in or unlock MS-102 to reveal the answer and full explanation for question #571. The question stem and answer options stay visible for context.
Submitted by tunde_lagos· Apr 18, 2026Manage security and threats by using Microsoft Defender XDR
Question
You have a Microsoft 365 subscription that contains a user named User1. You need to ensure that User1 can gather and summarize a custom set of data from signals in the Microsoft Defender XDR environment. The solution must NOT require that User1 have KQL knowledge. What should you do in Microsoft Defender XDR?
Options
- AFrom Advanced hunting, create a new query in the query editor.
- BFrom Cloud Discovery, create a report.
- CFrom API Explorer, create a query.
- DFrom Advanced hunting, create a new query in the query builder.
Unlock MS-102 to see the answer
You've previewed enough free MS-102 questions. Unlock MS-102 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Advanced hunting#Query builder#Threat signals#Microsoft Defender XDR