Exam SC-200 topic 6 question 15 discussion

Actual exam question from Microsoft's SC-200

Question #: 15
Topic #: 6

HOTSPOT
-

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint Plan 2 and contains a Windows device named Device1.

Twenty files on Device1 are quarantined by custom indicators as part of an investigation.

You need to release the 20 files from quarantine.

How should you complete the command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by smosmo at June 4, 2024, 3:04 p.m.

Comments

Submit Cancel

brichardson14

Highly Voted 10 months, 3 weeks ago

correct https://learn.microsoft.com/en-us/defender-endpoint/respond-file-alerts#restore-file-from-quarantine

upvoted 11 times

...

g_man_rap

Most Recent 8 months, 1 week ago

Executable: MpCmdRun.exe - This tool is used to perform various tasks related to Microsoft Defender, such as restoring files, scanning, and updating definitions. Argument: -Restore - This option is used to restore quarantined items.

upvoted 2 times

...