SC-200 · Question #369
SC-200 Question #369: Real Exam Question with Answer & Explanation
Sign in or unlock SC-200 to reveal the answer and full explanation for question #369. The question stem and answer options stay visible for context.
Question
You have a Microsoft 365 E5 subscription that uses Microsoft Copilot for Security. You have a Copilot for Security workspace that uses the following plugins: - Microsoft Entra - Microsoft Defender XDR From the Microsoft Defender portal, you use Copilot for Security to investigate a reported incident. You need to run a promptbook that will include information from Microsoft Entra ID Protection in the investigation. What should you do first?
Options
- AFrom the Microsoft Defender portal, create an incident report.
- BOpen the investigation in the Copilot for Security standalone experience.
- COpen the investigation in Microsoft Sentinel.
- DFrom the Microsoft Defender portal, create an advanced hunting query.
Unlock SC-200 to see the answer
You've previewed enough free SC-200 questions. Unlock SC-200 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.