Exam SC-200 Topic 2 Question 132 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 132
Topic #: 2
Hotspot Question
You have a Microsoft 365 E5 subscription.
You plan to perform cross-domain investigations by using Microsoft 365 Defender.
You need to create an advanced hunting query to identify devices affected by a malicious email attachment.
How should you complete the query?To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Suggested Answer:


Explanation:
https://docs.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-query- emails-devices?view=o365-worldwide#check-if-files-from-a-known-malicious-sender-are-on-your- devices

by Colin at Oct 13, 2026, 05:44 AM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

0
0
0
10