SC-200Practice Exam

Configure and manage manage incident response (25–30%)

Configure and manage manage security threats (15–20%)

Configure and manage configure alert and vulnerability notification rules

Configure and manage configure microsoft defender for endpoint advanced features

Configure and manage configure endpoint rules settings

Configure and manage manage automated investigation and response capabilities in microsoft

Configure and manage configure automatic attack disruption in microsoft defender xdr

Configure and manage configure and manage device groups, permissions, and automation levels

Configure and manage identify unmanaged devices in microsoft defender for endpoint

Configure and manage discover unprotected resources by using defender for cloud

Configure and manage identify and remediate devices at risk by using microsoft defender

Configure and manage mitigate risk by using exposure management in microsoft defender xdr

Configure and manage plan a microsoft sentinel workspace

Configure and manage configure microsoft sentinel roles

Configure and manage specify azure rbac roles for microsoft sentinel configuration

Configure and manage design and configure microsoft sentinel data storage, including log

Configure and manage identify data sources to be ingested for microsoft sentinel

Configure and manage implement and use content hub solutions

Configure and manage configure and use microsoft connectors for azure resources, including

Configure and manage plan and configure syslog and common event format (cef) event

Configure and manage plan and configure collection of windows security events by using data

Configure and manage create custom log tables in the workspace to store ingested data

Configure and manage monitor and optimize data ingestion

Configure and manage configure policies for microsoft defender for cloud apps

Configure and manage configure policies for microsoft defender for office 365

Configure and manage configure security policies for microsoft defender for endpoints,

Configure and manage configure cloud workload protections in microsoft defender for cloud

Configure and manage configure and manage custom detection rules

Configure and manage manage alerts, including tuning, suppression, and correlation

Configure and manage configure deception rules in microsoft defender xdr

Configure and manage classify and analyze data by using entities

Configure and manage configure and manage analytics rules

Configure and manage query microsoft sentinel data by using asim parsers

Configure and manage implement behavioral analytics

Configure and manage investigate and remediate threats by using microsoft defender for

Configure and manage investigate and remediate ransomware and business email compromise

Configure and manage investigate and remediate compromised entities identified by microsoft

Configure and manage investigate and remediate threats identified by microsoft purview

Configure and manage investigate and remediate alerts and incidents identified by microsoft

Configure and manage investigate and remediate security risks identified by microsoft

Configure and manage investigate and remediate compromised identities that are identified

Configure and manage investigate and remediate security alerts from microsoft defender for

Configure and manage investigate device timelines

Configure and manage perform actions on the device, including live response and collecting

Configure and manage perform evidence and entity investigation

Configure and manage investigate threats by using the unified audit log

Configure and manage investigate threats by using content search

Configure and manage investigate threats by using microsoft graph activity logs

Configure and manage investigate and remediate incidents in microsoft sentinel

Configure and manage create and configure automation rules

Configure and manage create and configure microsoft sentinel playbooks

Configure and manage run playbooks on on-premises resources

Configure and manage create and use promptbooks

Configure and manage manage sources for security copilot, including plugins and files

Configure and manage integrate security copilot by implementing connectors

Configure and manage manage permissions and roles in security copilot

Configure and manage monitor security copilot capacity and cost

Configure and manage identify threats and risks by using security copilot

Configure and manage investigate incidents by using security copilot

Configure and manage identify threats by using kusto query language (kql)

Configure and manage interpret threat analytics in the microsoft defender portal

Configure and manage create custom hunting queries by using kql

Configure and manage analyze attack vector coverage by using the mitre att&ck matrix

Configure and manage manage and use threat indicators

Configure and manage create and manage hunts

Configure and manage create and monitor hunting queries

Configure and manage use hunting bookmarks for data investigations

Configure and manage retrieve and manage archived log data

Configure and manage create and manage search jobs

Configure and manage activate and customize workbook templates

Configure and manage create custom workbooks that include kql

Configure and manage configure visualizations

Configure and manage manage security threats (15–20%)

Configure and manage configure alert and vulnerability notification rules

Configure and manage configure microsoft defender for endpoint advanced features

Configure and manage configure endpoint rules settings

Configure and manage manage automated investigation and response capabilities in microsoft

Configure and manage configure automatic attack disruption in microsoft defender xdr

Configure and manage configure and manage device groups, permissions, and automation levels

Configure and manage identify unmanaged devices in microsoft defender for endpoint

Configure and manage discover unprotected resources by using defender for cloud

Configure and manage identify and remediate devices at risk by using microsoft defender

Configure and manage mitigate risk by using exposure management in microsoft defender xdr

Configure and manage plan a microsoft sentinel workspace

Configure and manage configure microsoft sentinel roles

Configure and manage specify azure rbac roles for microsoft sentinel configuration

Configure and manage design and configure microsoft sentinel data storage, including log

Configure and manage identify data sources to be ingested for microsoft sentinel

Configure and manage implement and use content hub solutions

Configure and manage configure and use microsoft connectors for azure resources, including

Configure and manage plan and configure syslog and common event format (cef) event

Configure and manage plan and configure collection of windows security events by using data

Configure and manage create custom log tables in the workspace to store ingested data

Configure and manage monitor and optimize data ingestion

Configure and manage configure policies for microsoft defender for cloud apps

Configure and manage configure policies for microsoft defender for office 365

Configure and manage configure security policies for microsoft defender for endpoints,

Configure and manage configure cloud workload protections in microsoft defender for cloud

Configure and manage configure and manage custom detection rules

Configure and manage manage alerts, including tuning, suppression, and correlation

Configure and manage configure deception rules in microsoft defender xdr

Configure and manage classify and analyze data by using entities

Configure and manage configure and manage analytics rules

Configure and manage query microsoft sentinel data by using asim parsers

Configure and manage implement behavioral analytics

Configure and manage investigate and remediate threats by using microsoft defender for

Configure and manage investigate and remediate ransomware and business email compromise

Configure and manage investigate and remediate compromised entities identified by microsoft

Configure and manage investigate and remediate threats identified by microsoft purview

Configure and manage investigate and remediate alerts and incidents identified by microsoft

Configure and manage investigate and remediate security risks identified by microsoft

Configure and manage investigate and remediate compromised identities that are identified

Configure and manage investigate and remediate security alerts from microsoft defender for

Configure and manage investigate device timelines

Configure and manage perform actions on the device, including live response and collecting

Configure and manage perform evidence and entity investigation

Configure and manage investigate threats by using the unified audit log

Configure and manage investigate threats by using content search

Configure and manage investigate threats by using microsoft graph activity logs

Configure and manage investigate and remediate incidents in microsoft sentinel

Configure and manage create and configure automation rules

Configure and manage create and configure microsoft sentinel playbooks

Configure and manage run playbooks on on-premises resources

Configure and manage create and use promptbooks

Configure and manage manage sources for security copilot, including plugins and files

Configure and manage integrate security copilot by implementing connectors

Configure and manage manage permissions and roles in security copilot

Configure and manage monitor security copilot capacity and cost

Configure and manage identify threats and risks by using security copilot

Configure and manage investigate incidents by using security copilot

Configure and manage identify threats by using kusto query language (kql)

Configure and manage interpret threat analytics in the microsoft defender portal

Configure and manage create custom hunting queries by using kql

Configure and manage analyze attack vector coverage by using the mitre att&ck matrix

Configure and manage manage and use threat indicators

Configure and manage create and manage hunts

Configure and manage create and monitor hunting queries

Configure and manage use hunting bookmarks for data investigations

Configure and manage retrieve and manage archived log data

Configure and manage create and manage search jobs

Configure and manage activate and customize workbook templates

Configure and manage create custom workbooks that include kql

Configure and manage configure visualizations

Configure and manage configure alert and vulnerability notification rules

Configure and manage configure microsoft defender for endpoint advanced features

Configure and manage configure endpoint rules settings

Configure and manage manage automated investigation and response capabilities in microsoft

Configure and manage configure automatic attack disruption in microsoft defender xdr

Configure and manage configure and manage device groups, permissions, and automation levels

Configure and manage identify unmanaged devices in microsoft defender for endpoint

Configure and manage discover unprotected resources by using defender for cloud

Configure and manage identify and remediate devices at risk by using microsoft defender

Configure and manage mitigate risk by using exposure management in microsoft defender xdr

Configure and manage plan a microsoft sentinel workspace

Configure and manage configure microsoft sentinel roles

Configure and manage specify azure rbac roles for microsoft sentinel configuration

Configure and manage design and configure microsoft sentinel data storage, including log

Configure and manage identify data sources to be ingested for microsoft sentinel

Configure and manage implement and use content hub solutions

Configure and manage configure and use microsoft connectors for azure resources, including

Configure and manage plan and configure syslog and common event format (cef) event

Configure and manage plan and configure collection of windows security events by using data

Configure and manage create custom log tables in the workspace to store ingested data

Configure and manage monitor and optimize data ingestion

Configure and manage configure policies for microsoft defender for cloud apps

Configure and manage configure policies for microsoft defender for office 365

Configure and manage configure security policies for microsoft defender for endpoints,

Configure and manage configure cloud workload protections in microsoft defender for cloud

Configure and manage configure and manage custom detection rules

Configure and manage manage alerts, including tuning, suppression, and correlation

Configure and manage configure deception rules in microsoft defender xdr

Configure and manage classify and analyze data by using entities

Configure and manage configure and manage analytics rules

Configure and manage query microsoft sentinel data by using asim parsers

Configure and manage implement behavioral analytics

Configure and manage investigate and remediate threats by using microsoft defender for

Configure and manage investigate and remediate ransomware and business email compromise

Configure and manage investigate and remediate compromised entities identified by microsoft

Configure and manage investigate and remediate threats identified by microsoft purview

Configure and manage investigate and remediate alerts and incidents identified by microsoft

Configure and manage investigate and remediate security risks identified by microsoft

Configure and manage investigate and remediate compromised identities that are identified

Configure and manage investigate and remediate security alerts from microsoft defender for

Configure and manage investigate device timelines

Configure and manage perform actions on the device, including live response and collecting

Configure and manage perform evidence and entity investigation

Configure and manage investigate threats by using the unified audit log

Configure and manage investigate threats by using content search

Configure and manage investigate threats by using microsoft graph activity logs

Configure and manage investigate and remediate incidents in microsoft sentinel

Configure and manage create and configure automation rules

Configure and manage create and configure microsoft sentinel playbooks

Configure and manage run playbooks on on-premises resources

Configure and manage create and use promptbooks

Configure and manage manage sources for security copilot, including plugins and files

Configure and manage integrate security copilot by implementing connectors

Configure and manage manage permissions and roles in security copilot

Configure and manage monitor security copilot capacity and cost

Configure and manage identify threats and risks by using security copilot

Configure and manage investigate incidents by using security copilot

Configure and manage identify threats by using kusto query language (kql)

Configure and manage interpret threat analytics in the microsoft defender portal

Configure and manage create custom hunting queries by using kql

Configure and manage analyze attack vector coverage by using the mitre att&ck matrix

Configure and manage manage and use threat indicators

Configure and manage create and manage hunts

Configure and manage create and monitor hunting queries

Configure and manage use hunting bookmarks for data investigations

Configure and manage retrieve and manage archived log data

Configure and manage create and manage search jobs

Configure and manage activate and customize workbook templates

Configure and manage create custom workbooks that include kql

Configure and manage configure visualizations