Your company uses Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP)

HOTSPOT

Your company uses Microsoft Defender Advanced Threat Protection (Microsoft Defender ATP).

The devices onboarded to Microsoft Defender ATP are shown in the following table.

The alerts visible in the Microsoft Defender ATP alerts queue are shown in the following table.

You create a suppression rule that has the following settings:

✑ Triggering IOC: Any IOC

✑ Action: Hide alert

✑ Suppression scope: Alerts on ATP1 machine group

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

View Answer

Answer:

Explanation:

A suppression rule will not affect alerts that are already in the alerts queue. Only new alerts will be suppressed.