Exam SC-200 topic 6 question 23 discussion

HOTSPOT
-

You have a Microsoft 365 subscription that uses Microsoft Defender XDR and Microsoft Defender for Endpoint. The subscription contains the devices shown in the following table.



You discover the following forensic data:

• During the startup of Device1, a connection is established to Device2 via port 5555.
• Device2 connects to Device3 by using port 5555.
• Device4 connects to Device1 by using port 5555.

You perform the following actions:

• Initiate a live response session on Device1 and run the processes
• From Devices in the Microsoft Defender portal, isolate Device1 and Device2.

For each of the following statements, select Yes if True. Otherwise select No.

NOTE: Each correct selection is worth one point.

Suggested Answer: