A threat hunter wants to analyze how users, devices, and other entities relate to one another during a suspected attack. Which capability should be used?
More Perform threat hunting Questions
44 questions
Full Microsoft Certified: Security Operations Analyst Associate Practice Test
All topics covered
All Microsoft Certified: Security Operations Analyst Associate Questions
Browse by topic
Related Questions
Which Advanced Hunting table in Microsoft Defender XDR is used to investigate process creation and r...
Which language is used to create hunting queries in Microsoft Defender XDR and Microsoft Sentinel?...
Which Microsoft Defender XDR feature provides curated reports about active threats, impacted assets,...
A hunter wants to look for suspicious outbound connections from endpoints. Which Advanced Hunting ta...
A Sentinel analyst creates a useful hunting query and wants to preserve it for future reuse and moni...
Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy
Discussion
Be the first to share your understanding of this concept
Sign in to join the discussion