Microsoft Exam SC-200 Topic 2 Question 77 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 77
Topic #: 2

[All SC-200 Questions]

You have a Microsoft Sentinel workspace named SW1.

In SW1, you investigate an incident that is associated with the following entities:

* Host

* IP address

* User account

* Malware name

Which entity can be labeled as an indicator of compromise (loC) directly from the incident s page?

Amalware name

Bhost

Cuser account

DIP address

Show Suggested Answer

Suggested Answer: D

by Dortha at Jul 16, 2024, 03:47 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Raelene

17 days ago

Wait, are we sure the answer isn't just 'all of the above'? This incident sounds like a real party of indicators!

upvoted 0 times

...

Merilyn

20 days ago

I agree with Billy, the IP address could definitely be an indicator of compromise.

upvoted 0 times

...

Alex

21 days ago

I'm gonna go with IP address on this one. Tracking down that pesky IP could lead us straight to the culprit's hideout. Gotta love a good ol' digital manhunt!

upvoted 0 times

...

Billy

21 days ago

But the IP address could also be a potential indicator, don't you think?

upvoted 0 times

...

Dorthy

22 days ago

I disagree, I believe the user account is the indicator of compromise.

upvoted 0 times

...

Billy

24 days ago

I think the indicator of compromise could be the malware name.

upvoted 0 times

...

Letha

25 days ago

I don't know, the user account could be a pretty juicy clue too. Maybe the hacker left their calling card in the login details?

upvoted 0 times

...

Margart

26 days ago

Hold up, the host seems like the most direct indicator to me. If the machine's been compromised, that's a pretty big red flag.

upvoted 0 times

...

Cory

1 months ago

Hmm, I think the malware name is the most obvious indicator of compromise here. Gotta catch those sneaky bugs!

upvoted 0 times

Bobbye

23 days ago

B) host

upvoted 0 times

...

Catina

1 months ago

Definitely, the malware name is a clear indicator of compromise.

upvoted 0 times

...

Sue

1 months ago

A) malware name

upvoted 0 times

...