Microsoft Security Operations Analyst Associate SC-200 Practice Question
You manage Microsoft Defender for Endpoint for an organization that uses a third-party antivirus solution as the primary AV on Windows 10 endpoints. You need Defender for Endpoint to automatically stop and remediate malicious behaviors that the third-party engine allows to run. Which Defender for Endpoint advanced feature should you enable?
Enabling EDR in block mode allows Microsoft Defender for Endpoint to take blocking and remediation actions even when Microsoft Defender Antivirus is not the primary AV engine. The feature uses Defender for Endpoint's post-breach detection capability to identify malicious artifacts and then issues blocking commands through Defender Antivirus in passive mode. Network protection and controlled folder access focus on network-based threats and ransomware-related file changes, while cloud-delivered protection enhances signature efficacy but does not actively remediate processes allowed by another AV engine.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is EDR in block mode?
Open an interactive chat with Bash
How does Defender for Endpoint work with third-party antivirus solutions?
Open an interactive chat with Bash
What is post-breach detection capability?
Open an interactive chat with Bash
Microsoft Security Operations Analyst Associate SC-200
Manage a security operations environment
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .