Microsoft Security Operations Analyst Associate SC-200 Practice Question

The Action center is the dedicated workspace in Microsoft 365 Defender that aggregates all remediation actions from automated investigations across the tenant. It contains a Pending tab for actions that still need approval or rejection and a History tab for actions that have already been executed, each of which can be undone if required. Although the Investigation graph for an individual automatic investigation does include controls to approve or reject actions related to that specific investigation, it is not a tenant-wide, consolidated view and does not provide a single history list across multiple incidents. Device timeline focuses on event analysis for a specific endpoint, and Threat analytics delivers threat-intelligence reports; neither offers centralized remediation management.