nerdexam
Microsoft

SC-100 · Question #162

Your company wants to optimize using Microsoft Defender for Endpoint to protect its resources against ransomware based on Microsoft Security Best Practices. You need to prepare a post-breach response

Sign in or unlock SC-100 to reveal the answer and full explanation for question #162. The question stem and answer options stay visible for context.

Design security operations, identity, and compliance capabilities

Question

Your company wants to optimize using Microsoft Defender for Endpoint to protect its resources against ransomware based on Microsoft Security Best Practices. You need to prepare a post-breach response plan for compromised computers based on the Microsoft Detection and Response Team (DART) approach in Microsoft Security Best Practices. What should you include in the response plan?

Options

  • Acontrolled folder access
  • Bapplication isolation
  • Cmemory scanning
  • Dmachine isolation
  • Euser isolation

Unlock SC-100 to see the answer

You've previewed enough free SC-100 questions. Unlock SC-100 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Incident Response#Microsoft Defender for Endpoint#Containment#Ransomware
Full SC-100 Practice