Crucial Exams

Microsoft Security Operations Analyst Associate SC-200 Practice Question

You are a Security Operations Analyst for a company that uses Microsoft Defender for Office 365. A Safe Attachments policy is currently in Monitor (Detect) mode, so messages are delivered immediately, but if an attachment is later determined to be malicious it remains in users' inboxes. You need the service to remove any such messages automatically after detection without adding delivery delay. Which Defender for Office 365 feature should you enable?

  • Quarantine action with Notify Sender enabled

  • Zero-hour auto purge (ZAP)

  • Safe Links URL rewriting

  • Dynamic Delivery action in the Safe Attachments policy

Microsoft Security Operations Analyst Associate SC-200
Configure protections and detections
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot