Skip to content
SC-200
Manage a security operations environment
medium
Question 4 of 83

A hunting query in Microsoft Defender XDR has proven useful and now should raise alerts automatically when it matches future activity. What should the analyst create?

AA custom detection rule
BA workbook parameter
CA retention policy
DA Conditional Access policy

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion