SC-200 Certification Practice Question #31

Question

You have a Microsoft 365 E5 subscription that uses Microsoft 365 Defender.

You need to review new attack techniques discovered by Microsoft and identify vulnerable resources in the subscription. The solution must minimize administrative effort.

Which blade should you use in the Microsoft 365 Defender portal?

Accepted Answer

The requirement has two parts — review new attack techniques discovered by Microsoft, and identify vulnerable resources, with minimum administrative effort. MS Learn states Threat analytics is Microsoft's in-product threat intelligence built by Microsoft security researchers that surfaces "Popular and new attack techniques" and "Critical vulnerabilities," and each report's "Endpoints exposure" chart shows the number of vulnerable devices in your environment automatically. That single blade satisfies both halves of the requirement with no manual query building, which is why it beats Advanced hunting (manual KQL), Incidents & alerts (your own active alerts only), and Learning hub (training, not threat intel). Suggested Answer, the unanimous community vote, and MS Learn all converge on B.

More SC-200 practice questions