SC-200 Practice Question 3835

Exam: SC-200
Domain: Perform threat hunting
Difficulty: medium
What is the maximum lookback historical search window supported for queries executed in Microsoft Defender XDR Advanced Hunting?

Answer Options

A
Up to 30 days
B
Up to 7 years
C
Exactly 24 hours
D
Up to 365 days

Correct Answer

A: Up to 30 days

Explanation

Advanced Hunting stores up to 30 days of raw endpoint, identity, email, and cloud app telemetry events for interactive KQL queries.
Reference: https://learn.microsoft.com/en-us/microsoft-365/security/defender/advanced-hunting-overview

Related Practice Questions

SC-200 Practice Question 3667SC-200 Practice Question 3668SC-200 Practice Question 3669