QUESTION: 4

You have an Azure subscription that contains a user named User1 and a Microsoft Sentinel workspace named WS1. WS1 uses Microsoft Defender for Cloud.
You have the Microsoft security analytics rules shown in the following table.

User1 performs an action that matches Rule1, Rule2, Rule3, and Rule4.
How many incidents will be created in WS1?

Answer(s): D

Reveal Solution Next Question

QUESTION: 4

You have a Microsoft 365 subscription that uses Azure Defender.
You have 100 virtual machines in a resource group named RG1.
You assign the Security Admin roles to a new user named SecAdmin1.
You need to ensure that SecAdmin1 can apply quick fixes to the virtual machines by using Azure Defender. The solution must use the principle of least privilege.
Which role should you assign to SecAdmin1?

the Security Reader role for the subscription
the Contributor for the subscription
the Contributor role for RG1
the Owner role for RG1

Answer(s): C

Reveal Solution Next Question

QUESTION: 4

Your company uses line-of-business apps that contain Microsoft Office VBA macros.
You need to prevent users from downloading and running additional payloads from the Office VBA macros as additional child processes.
Which two commands can you run to achieve the goal? Each correct answer presents a complete solution.
Note: Each correct selection is worth one point.

Answer(s): B,C

Reference:

https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-atp/attack-surface-reduction

Reveal Solution Next Question

QUESTION: 4

You have an existing Azure logic app that is used to block Azure Active Directory (Azure AD) users. The logic app is triggered manually.
You deploy Azure Sentinel.
You need to use the existing logic app as a playbook in Azure Sentinel.
What should you do first?

And a new scheduled query rule.
Add a data connector to Azure Sentinel.
Configure a custom Threat Intelligence connector in Azure Sentinel.
Modify the trigger in the logic app.

Answer(s): D

Reveal Solution Next Question

Free SC-200 Exam Braindumps (page: 11)

QUESTION: 4

QUESTION: 4

QUESTION: 4

Reference:

QUESTION: 4