Microsoft SC-200 Question Answer
You have a Microsoft 365 E5 subscription that contains a device named Device 1. Device 1 is enrolled in Microsoft Defender for End point.
Device1 reports an incident that includes a file named File1 exe as evidence.
You initiate the Collect Investigation Package action and download the ZIP file.
You need to identify the first and last time File1.exe was executed.
What should you review in the investigation package?
Microsoft SC-200 Summary
- Vendor: Microsoft
- Product: SC-200
- Update on: Jul 30, 2025
- Questions: 370
