Skip to content
SC-200
Perform threat hunting
medium
Question 3 of 44

A hunter wants to look for suspicious outbound connections from endpoints. Which Advanced Hunting table is the most appropriate starting point?

ADeviceNetworkEvents
BDeviceFileEvents
CDeviceRegistryEvents
DEmailPostDeliveryEvents

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion