QUESTION: 1

DRAG DROP (Drag and Drop is not supported).
You plan to connect an external solution that will send Common Event Format (CEF) messages to Azure Sentinel.
You need to deploy the log forwarder.
Which three actions should you perform in sequence? To answer, move the appropriate actions form the list of actions to the answer area and arrange them in the correct order.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/sentinel/connect-cef-agent?tabs=rsyslog

Reveal Solution Next Question

QUESTION: 2

You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps and has Cloud Discovery enabled.
You need to enrich the Cloud Discovery datA. The solution must ensure that usernames in the Cloud Discovery traffic logs are associated with the user principal name (UPN) of the corresponding Microsoft Entra ID user accounts.
What should you do first?

From Conditional Access App Control, configure User monitoring.
Create a Microsoft 365 app connector.
Enable automatic redirection to Microsoft 365 Defender.
Create an Azure app connector.

Answer(s): B

Reveal Solution Next Question

QUESTION: 2

HOTSPOT
-
You have an Azure subscription that contains a user named User1 and a Microsoft Sentinel workspace named WS1.
You need to ensure that User1 can enable User and Entity Behavior Analytics (UEBA) for WS1. The solution must follow the principle of least privilege.
Which roles should you assign to User1? To answer, select the appropriate options in the answer area.
Note: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

QUESTION: 2

DRAG DROP (Drag and Drop is not supported).
You need to add notes to the events to meet the Azure Sentinel requirements.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of action to the answer area and arrange them in the correct order.
Select and Place:

See Explanation section for answer.

Answer(s): A

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/sentinel/bookmarks

Reveal Solution Next Question

Free SC-200 Exam Braindumps (page: 4)

QUESTION: 1

Explanation:

Reference:

QUESTION: 2

QUESTION: 2

Explanation:

QUESTION: 2

Explanation:

Reference: