Searching CertSprout…

CertSproutGrow your skills. Collect your wins.

CertSprout is not affiliated with CompTIA, Microsoft, Cisco, ISC2, AWS or any other certification body. CertSprout reads credentials from issuers’ public records at the credential holder’s request.

For teams Privacy Terms Support About our bot Created by Samios Software Solutions

A little curiosity goes a long way

Find your next discovery.

Search certifications, learning topics, career paths, public profiles and help across CertSprout.

Search CertSprout

Browse certifications by field or career path →Provider offerings & September 2026 review notes →

Everything Certifications Mini-lessons People Career paths Study resources Exam deals App & help

Showing 20 results · Page 12 for “endpoint”. More results are available below.

Mini-lessons

SC-900 · Describe the capabilities of Microsoft security solutions

Defender XDR: Endpoint, Office 365, Identity, Cloud Apps

… under one portal and one incident model. Defender for Endpoint provides endpoint detection and response, attack surface reduction and vulnerability management for Windows, macOS, Linux, iOS…

SC-900 · Describe the capabilities of Microsoft security solutions

The Defender portal is where incidents live

…for the Defender XDR family. It correlates alerts from endpoints, email, identities and cloud apps into incidents, shows an attack story timeline, and offers automated investigation and resp…

SC-900 · Describe the capabilities of Microsoft compliance solutions

Know your data, protect it, prevent loss, govern it

← PreviousPage 12Next →

People search uses public names, handles and headlines. Private and unlisted profiles are excluded. Your goals are visible only to you in search.

…policies across Exchange, Teams, SharePoint, OneDrive, endpoints and cloud apps to block or warn when sensitive content is shared. Govern your data uses retention policies and labels, record…

SOPH-AT15 · Security monitoring

An alert is a starting point for investigation

A detection rule identifies behavior worth examining, not a final verdict. Establish the affected identity, asset, time and activity, then correlate independent records. Compare the behavior…

SOPH-AT15 · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SOPH-AT15 · MSP tenant boundaries

Tenant boundaries in MSP consoles

Check both customer scope and role permissions before performing a task. Parent policies may flow to child tenants or devices, while supported overrides change effective configuration. Inspe…

SOPH-AT15 · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

SOPH-ET12 · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SOPH-ET15 · Security monitoring

An alert is a starting point for investigation

A detection rule identifies behavior worth examining, not a final verdict. Establish the affected identity, asset, time and activity, then correlate independent records. Compare the behavior…

SOPH-ET15 · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SOPH-ET15 · MSP tenant boundaries

Tenant boundaries in MSP consoles

Check both customer scope and role permissions before performing a task. Parent policies may flow to child tenants or devices, while supported overrides change effective configuration. Inspe…

SOPH-ET15 · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

SOPH-S15 · Security monitoring

An alert is a starting point for investigation

A detection rule identifies behavior worth examining, not a final verdict. Establish the affected identity, asset, time and activity, then correlate independent records. Compare the behavior…

SOPH-S15 · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SOPH-S15 · MSP tenant boundaries

Tenant boundaries in MSP consoles

Check both customer scope and role permissions before performing a task. Parent policies may flow to child tenants or devices, while supported overrides change effective configuration. Inspe…

SOPH-S15 · Security foundations

Match the control to the security objective

Confidentiality limits who can see information, integrity protects against unauthorized changes, and availability keeps services usable. A control may support several objectives, but the imm…

SPLUNK-CDA · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SPLUNK-CDARCH · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SPLUNK-CDE · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…

SSCP · Incident response

Containment and recovery solve different problems

…rvice leaves the business disrupted. Worked example An endpoint shows active ransomware encryption. Which response most directly limits spread while preserving investigation options? Isolate…