SC-200Exam Domain

Mitigate Threats Using Microsoft Defender XDR (25–30%)SC-200 Study Guide

33 chapters
~825 min total
Free — no signup required

Mitigate Threats Using Microsoft Defender XDR (25–30%) Chapters

1

Microsoft Defender for Endpoint

Objective 1.1 · Defender XDR

25m
2

Microsoft Defender for Identity

Objective 1.2 · Defender XDR

25m
3

Microsoft Defender for Office 365

Objective 1.3 · Defender XDR

25m
4

Microsoft Defender for Cloud Apps

Objective 1.4 · Defender XDR

25m
17

Defender for Endpoint Alert Triage

Objective 1.1 · Defender XDR

25m
18

Advanced Hunting with KQL in Defender

Objective 1.1 · Defender XDR

25m
19

Defender for Endpoint Live Response

Objective 1.1 · Defender XDR

25m
20

Defender for Identity Attack Detections

Objective 1.2 · Defender XDR

25m
46

Defender XDR Incident Correlation

Objective 1.1 · Defender XDR

25m
47

Defender for Endpoint ASR Rules

Objective 1.1 · Defender XDR

25m
48

Defender for Endpoint Network Protection

Objective 1.1 · Defender XDR

25m
49

Defender for Endpoint Device Inventory

Objective 1.1 · Defender XDR

25m
50

Defender for Endpoint Onboarding Methods

Objective 1.1 · Defender XDR

25m
51

Automated Investigation and Response (AIR) in MDE

Objective 1.1 · Defender XDR

25m
52

Defender for Identity Alert Categories

Objective 1.2 · Defender XDR

25m
53

Domain Controller and Active Directory Monitoring

Objective 1.2 · Defender XDR

25m
54

Defender for Office 365 Policy Configuration

Objective 1.3 · Defender XDR

25m
55

Safe Attachments and ZAP in Defender

Objective 1.3 · Defender XDR

25m
56

Defender for Cloud Apps Policies

Objective 1.4 · Defender XDR

25m
57

Shadow IT Discovery with MCAS

Objective 1.4 · Defender XDR

25m
58

Conditional Access App Control in MCAS

Objective 1.4 · Defender XDR

25m
72

SOC Incident Triage and Escalation

Objective 1.1 · Defender XDR

25m
73

Live Response and Remote Forensics

Objective 1.1 · Defender XDR

25m
75

Custom Detection Rules in Defender XDR

Objective 1.1 · Defender XDR

25m
76

Entra ID Risk Policies and Sign-In Risk

Objective 1.4 · Defender XDR

25m
81

Device Timeline Analysis in MDE

Objective 1.1 · Defender XDR

25m
82

User Risk Investigation in Entra ID Protection

Objective 1.4 · Defender XDR

25m
86

Microsoft Copilot for Security

Objective 1.1 · Defender XDR

25m
92

Defender for Endpoint Security Baselines

Objective 1.1 · Defender XDR

25m
93

Defender for Endpoint Web Content Filtering

Objective 1.1 · Defender XDR

25m
97

Defender XDR Security Graph and Investigations

Objective 1.1 · Defender XDR

25m
99

Microsoft Copilot for Security

Objective 1.1 · Defender XDR

25m
101

Defender XDR Automatic Attack Disruption

Objective 1.1 · Defender XDR

25m

Other SC-200 Domains

Test your Mitigate Threats Using Microsoft Defender XDR (25–30%) knowledge

Free SC-200 practice questions with full explanations. Test what you learn chapter by chapter.

SC-200 Practice Questions