SC-200 Certification Practice Question #174

Question

You have a Microsoft 365 E5 subscription.

You need to configure Microsoft Defender XDR automatic attack disruption to use signals generated by Microsoft Defender for Cloud Apps.

Which two actions should you perform for Defender for Cloud Apps in the Microsoft Defender portal? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

The MS Learn "Configure automatic attack disruption" article lists exactly two Microsoft Defender for Cloud Apps prerequisites: the **Microsoft Office 365 connector** (Defender for Cloud Apps must be connected to Microsoft 365 via the connector) and **App Governance** turned on. These map precisely to options A and C. Because the question asks for **two** actions, the Suggested Answer of C alone is incomplete; the community Most Voted AC (7 votes), the highest-voted comments (jamspurple 👍 5, Blasty 👍 2), and MS Learn all converge on AC. Options B and D are Cloud Discovery features and E is information-protection file monitoring — none are prerequisites for feeding Defender for Cloud Apps signals into XDR attack disruption. Confidence 92%: the single-source dissent (AD/CD) is ChatGPT-generated with one vote each and contradicts the official prerequisites list.

More SC-200 practice questions