Security Operations Analyst (SC-200) exam prep with 300+ practice questions, detailed explanations, and domain-aligned coverage.
Answer below — no signup needed. The full bank is 300+ questions with detailed explanations.
A SOC analyst is investigating a Sentinel incident with 8 alerts about a user account performing reconnaissance activities (querying AD, scanning network, enumerating SMB shares). The analyst confirms the account is compromised. What post-incident activity is most critical?
Get unlimited access to full-length practice exams, 300+ questions, and flashcards — rated 4.8/5.
45,000+
Questions
88
Certifications
279+
Practice Exams
✓ Cancel anytime ✓ Instant access ✓ No hidden fees