SC-200 Practice Question 3808
Exam: SC-200
Domain: Respond to security incidents
Difficulty: easy
What is the purpose of an Incident Tag in Microsoft Sentinel?
Answer Options
A
Custom labels attached to incidents to classify, filter, and track campaigns
B
Physical barcode stickers applied to laptop hardware
C
RFID chips embedded in employee access badges
D
Watermarks applied to Word documents
Correct Answer
A: Custom labels attached to incidents to classify, filter, and track campaigns
Explanation
Incident tags are custom label strings attached to incidents to classify, filter, and track specific threat campaigns (e.g., "Log4j", "Executive", "Ransomware").