SC-200 · Question #413
You have a Microsoft 365 subscription that uses Microsoft Defender XDR, Microsoft Purview, and Exchange Online. You have a partner company named Contoso, Ltd. You need to review all the emails that…
The correct answer is D. Advanced Hunting. Advanced hunting is a query-based threat hunting tool that lets you explore up to 30 days of raw data. You can proactively inspect events in your network to locate threat indicators and entities. The flexible access to data enables unconstrained hunting for both known and…
Question
You have a Microsoft 365 subscription that uses Microsoft Defender XDR, Microsoft Purview, and Exchange Online. You have a partner company named Contoso, Ltd. You need to review all the emails that contain PDF attachments and were received from Contoso during the past month. The solution must minimize administrative effort. What should you use?
Options
- AContent search
- BContent explorer
- CActivity explorer
- DAdvanced Hunting
How the community answered
(45 responses)- A18% (8)
- B7% (3)
- C4% (2)
- D71% (32)
Explanation
Advanced hunting is a query-based threat hunting tool that lets you explore up to 30 days of raw data. You can proactively inspect events in your network to locate threat indicators and entities. The flexible access to data enables unconstrained hunting for both known and potential threats. https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-overview https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-emailattachmentinfo-table https://learn.microsoft.com/en-us/defender-xdr/advanced-hunting-emailevents-table
Community Discussion
No community discussion yet for this question.