QUESTION: 233

You have an Azure Sentinel workspace.
You need to automate responses to threats detected by Azure Sentinel.
What should you use?

adaptive network hardening in Azure Security Center
Azure Service Health
Azure Monitor workbooks
adaptive application controls in Azure Security Center

Answer(s): C

Reveal Solution Next Question

DRAG DROP (Drag and Drop is not supported)
Match the Azure services benefits to the correct descriptions.

Instructions: To answer, drag the appropriate benefit from the column on the left to its description on the right. Each benefit may be used once, more than once, or not at all.

Note: Each correct match is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Box 1: Microsoft Sentinel
Microsoft Sentinel is a scalable, cloud-native, security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for attack detection, threat visibility, proactive hunting, and threat response.

Box 2: Microsoft Defender for Cloud
You can find your overall secure score, as well as your score per subscription, through the Azure portal. Defender for Cloud displays your secure score prominently in the portal.

Box 3: Azure Key Vault
A favored approach to store the credentials or keys in the Azure Key Vault as secrets and reference the secrets as environment variables in our Azure functions apps.

Reference:

https://docs.microsoft.com/en-us/azure/sentinel/overview https://docs.microsoft.com/en-us/azure/defender-for-cloud/secure-score-access-and-track https://levelup.gitconnected.com/a-secure-way-to-use-credentials-and-secrets-in-azure-functions-7ec91813c807

Reveal Solution Next Question

QUESTION: 235

Which Azure service can you use as a security information and event management (SIEM) solution?

Azure Analysis Services
Microsoft Sentinel
Azure Information Protection
Azure Cognitive Services

Answer(s): B

Explanation:

Microsoft Sentinel is a scalable, cloud-native, security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for attack detection, threat visibility, proactive hunting, and threat response.

Reference:

https://docs.microsoft.com/en-us/azure/sentinel/overview

Reveal Solution Next Question

QUESTION: 236

HOTSPOT (Drag and Drop is not supported)
Select the answer that correctly completes the sentence.

See Explanation section for answer.

Answer(s): A

Explanation:

Box: collection of policy definitions
An Azure Policy initiative is a collection of Azure Policy definitions, or rules, that are grouped together towards a specific goal or purpose. Azure initiatives simplify management of your policies by grouping a set of policies together, logically, as a single item.

Reference:

https://docs.microsoft.com/en-us/azure/defender-for-cloud/security-policy-concept

Reveal Solution Next Question

Free AZ-900 Exam Braindumps (page: 59)

QUESTION: 233

QUESTION: 234

Explanation:

Reference:

QUESTION: 235

Explanation:

Reference:

QUESTION: 236

Explanation:

Reference: