SC-200 Practice Question 3791
Exam: SC-200
Domain: Respond to security incidents
Difficulty: medium
What does the "Live Response getfile" command do during an interactive console session on a Windows workstation?
Answer Options
A
Downloads the specified file from the endpoint to the analyst portal session
B
Deletes the file permanently from the remote drive
C
Executes the file with local system privileges
D
Uploads a replacement file onto the endpoint
Correct Answer
A: Downloads the specified file from the endpoint to the analyst portal session
Explanation
The `getfile` command downloads a specific file from the targeted endpoint to the analyst secure download pane in the Defender portal for offline reverse-engineering.