SC-200 Practice Question 3705
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: medium
Which component in Microsoft Defender for Endpoint is responsible for blocking malware execution by evaluating behavioral telemetry in the cloud in real time?
Answer Options
A
Cloud-delivered protection (cloud protection service)
B
Local BIOS hardware firmware
C
The network router DHCP server
D
Windows Disk Defragmenter
Correct Answer
A: Cloud-delivered protection (cloud protection service)
Explanation
Cloud-delivered protection (cloud protection service) works with local antivirus to inspect metadata, unpack suspicious payloads, and deliver instant zero-day blocking verdicts.