SC-200 - Respond to Security Incidents - Section 2.1
Investigate and remediate threats across Microsoft Defender for Office 365, Microsoft Purview, and Microsoft Defender for Cloud workload protections.
Investigate email, collaboration, and data threats using Microsoft Defender for Office 365, and identify compromised entities surfaced by Microsoft Purview. Apply remediation actions for threats detected by Microsoft Defender for Cloud workload protections, choosing the appropriate action for each resource type.
Microsoft Defender for Office 365 with automatic attack disruptioncompromised entities identified by Microsoft PurviewMicrosoft Defender for Cloud workload protectionsremediation actions
More in this domain
Back to all Respond to Security Incidents objectives, or the SC-200 cert hub.
Examworthy is not affiliated with or endorsed by Microsoft. Original, blueprint-aligned practice material only.