FREE SC-900 Microsoft Defender for Endpoint Questions and Answers

Question 1

Which Microsoft Defender for Endpoint capability is designed to discover, prioritize, and remediate software vulnerabilities and misconfigurations on devices?

Accepted Answer

Threat & Vulnerability Management

Answer

Attack Surface Reduction (ASR)

Answer

Endpoint Detection and Response (EDR)

Answer

Automated Investigation and Remediation (AIR)

Question 2

An analyst observes suspicious process creation and lateral movement activities on a workstation. Which Defender for Endpoint feature provides the detailed event timeline and process tree to investigate these activities?

Accepted Answer

Endpoint Detection and Response (EDR)

Answer

Next-generation protection

Answer

Attack Surface Reduction (ASR)

Answer

Microsoft Secure Score

Question 3

What is the primary goal of Attack Surface Reduction (ASR) rules in Microsoft Defender for Endpoint?

Accepted Answer

To prevent malware from running by blocking common malicious behaviors.

Answer

To scan for and remove existing malware on a device.

Answer

To provide security recommendations to improve device configuration.

Answer

To investigate and respond to security alerts after they occur.

Question 4

A security alert is triggered on a device, and Defender for Endpoint automatically quarantines a malicious file and stops a suspicious process. Which capability performed these actions?

Accepted Answer

Automated Investigation and Remediation (AIR)

Answer

Threat & Vulnerability Management

Answer

Next-generation protection

Answer

Advanced hunting

Question 5

Which component of Microsoft Defender for Endpoint uses cloud-based machine learning, behavior analysis, and heuristics to provide real-time malware protection?

Accepted Answer

Next-generation protection

Answer

Endpoint Detection and Response (EDR)

Answer

Attack Surface Reduction (ASR)

Answer

Threat & Vulnerability Management

Question 6

A security operations team wants to proactively search for signs of compromise across all their onboarded devices using custom Kusto Query Language (KQL) queries. Which Defender for Endpoint feature should they use?

Accepted Answer

Advanced hunting

Answer

Automated Investigation and Remediation (AIR)

Answer

Live Response

Answer

Threat Analytics