You create an Azure subscription.You enable Microsoft Defender for Cloud for the subscription.You need to use Defender for Cloud to protect on-premises computers.What should you do on the on-premises computers?
Answer(s): A
Security Center collects data from your Azure virtual machines (VMs), virtual machine scale sets, IaaS containers, and non-Azure (including on-premises) machines to monitor for security vulnerabilities and threats.Data is collected using:-The Log Analytics agent, which reads various security-related configurations and event logs from the machine and copies the data to your workspace for analysis. Examples of such data are: operating system type and version, operating system logs (Windows event logs), running processes, machine name, IP addresses, and logged in user.-Security extensions, such as the Azure Policy Add-on for Kubernetes, which can also provide data to Security Center regarding specialized resource types.
https://docs.microsoft.com/en-us/azure/security-center/security-center-enable-data-collection
A security administrator receives email alerts from Microsoft Defender for Cloud for activities such as potential malware uploaded to a storage account and potential successful brute force attacks.The security administrator does NOT receive email alerts for activities such as antimalware action failed and suspicious network activity. The alerts appear in Defender for Cloud.You need to ensure that the security administrator receives email alerts for all the activities.What should you configure in the Defender for Cloud settings?
https://techcommunity.microsoft.com/t5/microsoft-365-defender/get-email-notifications-on-new-incidents-from-microsoft-365/ba-p/2012518
DRAG DROP (Drag and Drop is not supported)You have an Azure Functions app that generates thousands of alerts in Microsoft Defender for Cloud each day for normal activity.You need to hide the alerts automatically in Defender for Cloud.Which three actions should you perform in sequence in Defender for Cloud? Each correct answer presents part of the solution.Note: Each correct selection is worth one point.Select and Place:
https://techcommunity.microsoft.com/t5/azure-security-center/suppression-rules-for-azure-security-center-alerts-are-now/ba-p/1404920
DRAG DROP (Drag and Drop is not supported)You have an Azure subscription.You need to delegate permissions to meet the following requirements:-Enable and disable advanced features of Microsoft Defender for Cloud.-Apply security recommendations to resource.The solution must use the principle of least privilege.Which role should you use for each requirement? To answer, drag the appropriate roles to the correct requirements. Each role may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.Note: Each correct selection is worth one point.Select and Place:
https://docs.microsoft.com/en-us/azure/security-center/security-center-permissions
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that uses Microsoft Defender for Cloud.You plan to use Defender for Cloud workflow automation to respond to Defender for Cloud threat alerts.You need to create an Azure policy that will perform threat remediation automatically.What should you include in the solution? To answer, select the appropriate options in the answer area.Note: Each correct selection is worth one point.Hot Area:
https://docs.microsoft.com/en-us/azure/governance/policy/concepts/effects https://docs.microsoft.com/en-us/azure/security-center/workflow-automation
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have Linux virtual machines on Amazon Web Services (AWS).You deploy Azure Defender and enable auto-provisioning.You need to monitor the virtual machines by using Azure Defender.Solution: You enable Azure Arc and onboard the virtual machines to Azure Arc.Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have Linux virtual machines on Amazon Web Services (AWS).You deploy Azure Defender and enable auto-provisioning.You need to monitor the virtual machines by using Azure Defender.Solution: You manually install the Log Analytics agent on the virtual machines.Does this meet the goal?
Answer(s): B
https://docs.microsoft.com/en-us/azure/defender-for-cloud/quickstart-onboard-machines?pivots=azure-arc
You have five on-premises Linux servers.You have an Azure subscription that uses Microsoft Defender for Cloud.You need to use Defender for Cloud to protect the Linux servers.What should you install on the servers first?
Answer(s): C
Post your Comments and Discuss Microsoft SC-200 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-200 content, but please register or login to continue.