Exam SC-200 Topic 2 Question 132 Discussion
Actual exam question for Microsoft's SC-200 exam
Question #: 132
Topic #: 2
Question #: 132
Topic #: 2
Hotspot Question
You have a Microsoft 365 E5 subscription.
You plan to perform cross-domain investigations by using Microsoft 365 Defender.
You need to create an advanced hunting query to identify devices affected by a malicious email attachment.
How should you complete the query?To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

You have a Microsoft 365 E5 subscription.
You plan to perform cross-domain investigations by using Microsoft 365 Defender.
You need to create an advanced hunting query to identify devices affected by a malicious email attachment.
How should you complete the query?To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Suggested Answer:

Explanation:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-query- emails-devices?view=o365-worldwide#check-if-files-from-a-known-malicious-sender-are-on-your- devices
by Colin at Oct 13, 2026, 05:44 AM
0
0
0
10
Comments
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Report Comment
Commenting
You can sign-up / login (it's free).