SC-200 Practice Question 3787
Exam: SC-200
Domain: Respond to security incidents
Difficulty: easy
You need to execute an automated Defender Antivirus scan on an endpoint suspected of hosting dormant trojan files without rebooting the system. Which action should you select in the Defender portal?
Answer Options
A
Select "Run Antivirus Scan" and choose "Full scan"
B
Isolate device and wait 24 hours
C
Reinstall Windows from a USB installation stick
D
Power off the server immediately
Correct Answer
A: Select "Run Antivirus Scan" and choose "Full scan"
Explanation
Under the device response actions, select "Run Antivirus Scan" and choose "Full scan" to inspect all local drives and memory.