Defender for endpoint Lab

Unless you have access to create demo tenants as a partner, your best option is likely to start up a Office 365/Microsoft 365 E5 trial tenant, and if needed, add the Enterprise Mobility + Security E5 trial on top of it. This way you have a tenant which has full access to Defender for Endpoint during the trial period, and you can use it to practice your skills. Keep in mind these trials will expire (by default 30 days, but you can usually extend the trial period at least once with another 30 days).

Office 365 E5 Trial --> https://go.microsoft.com/fwlink/p/?LinkID=698279
Enterprise Mobility + Security (EMS) E5 Trial --> https://go.microsoft.com/fwlink/p/?LinkID=2077039

vscoderbrad 

 

Once you get access, Microsoft Defender for Endpoint has an easy to set-up evaluation lab. 

 

Microsoft Defender for Endpoint evaluation lab | Microsoft Docs 

 

In the evaluation lab, you can generate simulated attacks, and then investigate and respond to them.  This provides an environment where you can hone your skills for the SC-200 exam. 

 

Good Luck, 

JB