SC-200 · Question #343
SC-200 Question #343: Real Exam Question with Answer & Explanation
Sign in or unlock SC-200 to reveal the answer and full explanation for question #343. The question stem and answer options stay visible for context.
Question
You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains the devices shown in the following table. You initiate a live response session on each device. You need to collect a Defender for Endpoint investigation package from each device. On which devices can you collect the package by running advanced live response commands from the command-line interface (CLI)?
Options
- ADevice1 and Device2 only
- BDevice1, Device2, and Device3 only
- CDevice3 and Device4 only
- DDevice1, Device2, Device3, and Device4
Unlock SC-200 to see the answer
You've previewed enough free SC-200 questions. Unlock SC-200 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.