SC-200 Certification Practice Question #246

Question

You have a Microsoft 365 subscription that contains a Windows device named Device1. Device1 is onboarded to Microsoft Defender for Endpoint.

You initiate a live response session on Device1.

You need to execute a long running script. The solution must ensure that you can run additional commands during the session while the script is running.

How should you complete the live response command? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Accepted Answer

In a Defender for Endpoint live response session you execute a library script with the `run` command, and appending `&` runs it in the background so you can keep issuing additional commands while it executes (returning to it later with `fg`). MS Learn states this verbatim for long-running commands, and the highly-voted community answer (13 👍) plus two confirming comments all land on `run script1.ps1 &`. The alternative box-2 characters (`$`, `|`, `!`) are explicitly listed as forbidden in live response, eliminating them, which makes `&` the only valid background operator. High confidence with a small reservation only because no official Suggested Answer is recorded in the dump.

More SC-200 practice questions