QUESTION: 12

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint and contains a user named User1 and a Microsoft 365 group named Group1. All users are assigned a Defender for Endpoint Plan 1 license.
You enable Microsoft Defender XDR Unified role-based access control (RBAC) for Endpoints & Vulnerability Management.
You need to ensure that User1 can configure alerts that will send email notifications to Group1. The solution must follow the principle of least privilege.
Which permissions should you assign to User1?

Defender Vulnerability Management - Remediation handling
Alerts investigation
Live response capabilities: Basic
Manage security settings

Answer(s): D

Reveal Solution Next Question

QUESTION: 12

You have a Microsoft 365 subscription that uses Microsoft Defender for Endpoint Plan 2 and contains 500 Windows devices.
You plan to create a Microsoft Defender XDR custom deception rule.
You need to ensure that the rule will be applied to only 10 specific devices.
What should you do first?

Add custom lures to the rule.
Add the IP address of each device to the list of decoy accounts and hosts of the rule.
Add the devices to a group.
Assign a tag to the devices.

Answer(s): D

Reveal Solution Next Question

QUESTION: 12

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription that uses Microsoft Defender XDR.
From the Microsoft Defender portal, you perform an audit search and export the results as a file named File1.csv that contains 10,000 rows.
You use Microsoft Excel to perform Get & Transform Data operations to parse the AuditData column from File1.csv. The operations fail to generate columns for specific JSON properties.
You need to ensure that Excel generates columns for the specific JSON properties in the audit search results.
Solution: From Excel, you apply filters to the existing columns in File1.csv to reduce the number of rows, and then you perform the Get & Transform Data operations to parse the AuditData column.
Does this meet the requirement?

Answer(s): B

Reveal Solution Next Question

QUESTION: 12

You have an Azure subscription that has Azure Defender enabled for all supported resource types.
You need to configure the continuous export of high-severity alerts to enable their retrieval from a third-party security information and event management (SIEM) solution.
To which service should you export the alerts?

Azure Cosmos DB
Azure Event Grid
Azure Event Hubs
Azure Data Lake

Answer(s): C

Reference:

https://docs.microsoft.com/en-us/azure/security-center/continuous-export?tabs=azure-portal

Reveal Solution Next Question

Free SC-200 Exam Braindumps (page: 25)

QUESTION: 12

QUESTION: 12

QUESTION: 12

QUESTION: 12

Reference: