Exam SC-200 topic 5 question 26 discussion

Actual exam question from Microsoft's SC-200

Question #: 26
Topic #: 5

HOTSPOT
-

You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR.

You are implementing a deception rule.

You need to provide a custom lure file.

For the custom lure, you set Planting path to HOME.

Which types of files can you use for the custom lure, and in which home directory should the file be located on a device? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Blasty at Feb. 25, 2025, 1:57 p.m.

Comments

Submit Cancel

Blasty

2 weeks, 5 days ago

This should be the 'active user' as stated in the settings when using it: security.microsoft.com system > settings > endpoints > general > advanced features > deception From there you see --> System > settings > endpoints > Rules > Deception rules + Add deception rule --> Use custom lures only --> "You can use {HOME} as the active user's home folder, which must be at the beginning if used, or a regula Windows path. Network paths are not supported.

upvoted 4 times

a_kto_to

1 week, 1 day ago

Looks that you are correct, and only documents, config files and link files can be added: https://learn.microsoft.com/en-us/defender-xdr/configure-deception

upvoted 1 times

...

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 5 question 26 discussion

Comments

Blasty

a_kto_to

SY0-701