nerdexam
Microsoft

SC-200 · Question #323

You have a Microsoft 365 subscription that uses Microsoft Defender XDR and contains a Windows device named Device1. The timeline of Device1 includes three files named File1.ps1, File2.exe, and…

The correct answer is D. File2.exe and File3.dll only. Deep analysis currently supports extensive analysis of portable executable (PE) files (including .exe and .dll files). PE files typically have .exe or .dll extensions (executable programs or applications)…

Submitted by suresh_in· Apr 18, 2026

Question

You have a Microsoft 365 subscription that uses Microsoft Defender XDR and contains a Windows device named Device1. The timeline of Device1 includes three files named File1.ps1, File2.exe, and File3.dll. You need to submit files for deep analysis in Microsoft Defender XDR. Which files can you submit?

Options

  • AFile1.ps1 only
  • BFile2.exe only
  • CFile3.dll only
  • DFile2.exe and File3.dll only
  • EFile1.ps1 and File2.exe only
  • FFile1.ps1, File2.exe, and File3.dll

How the community answered

(41 responses)
  • A
    10% (4)
  • B
    2% (1)
  • C
    2% (1)
  • D
    78% (32)
  • E
    7% (3)

Explanation

Deep analysis currently supports extensive analysis of portable executable (PE) files (including .exe and .dll files). PE files typically have .exe or .dll extensions (executable programs or applications). https://learn.microsoft.com/en-us/defender-endpoint/respond-file-alerts#deep-analysis

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice