MS-102 Practice Question 3077
Exam: MS-102
Domain: Manage security and threats using Microsoft Defender XDR
Difficulty: medium
You are investigating an alert in Defender for Endpoint. You need to connect remotely to a Windows workstation to inspect processes, query the registry, and run remediation scripts via shell. Which feature provides this?
Answer Options
A
Live Response
B
Remote Desktop Protocol (RDP)
C
Quick Assist over internet
D
Telnet connection over port 23
Correct Answer
A: Live Response
Explanation
Live Response in Microsoft Defender for Endpoint provides security analysts with an interactive remote command-line shell to investigate and remediate endpoints.