QUESTION: 2

You have an Azure subscription that uses Microsoft Defender for Cloud.
You need to configure Defender for Cloud to mitigate the following risks:
• Vulnerabilities within the application source code
• Exploitation toolkits in declarative templates
• Operations from malicious IP addresses
• Exposed secrets
Which two Defender for Cloud services should you use? Each correct answer presents part of the solution.
Note: Each correct answer is worth one point.

Microsoft Defender for Resource Manager
Microsoft Defender for DNS
Microsoft Defender for App Service
Microsoft Defender for Servers
Microsoft Defender for DevOps

Answer(s): A,E

Reveal Solution Next Question

QUESTION: 2

HOTSPOT
-
You have an Azure subscription that contains a Microsoft Sentinel workspace named WS1.
You need to ensure that the incidents in WS1 include a list of actions that must be performed. The solution must meet the following requirements:
• Ensure that you can build a tailored list of actions for each type of incident.
• Minimize administrative effort.
What should you do? To answer, select the appropriate options in the answer area.
Note: Each correct selection is worth one point.

See Explanation section for answer.

Answer(s): A

Explanation:

Reveal Solution Next Question

QUESTION: 2

You receive an alert from Azure Defender for Key Vault.
You discover that the alert is generated from multiple suspicious IP addresses.
You need to reduce the potential of Key Vault secrets being leaked while you investigate the issue. The solution must be implemented as soon as possible and must minimize the impact on legitimate users.
What should you do first?

Modify the access control settings for the key vault.
Enable the Key Vault firewall.
Create an application security group.
Modify the access policy for the key vault.

Answer(s): B

Reference:

https://docs.microsoft.com/en-us/azure/security-center/defender-for-key-vault-usage

Reveal Solution Next Question

QUESTION: 2

You need to receive a security alert when a user attempts to sign in from a location that was never used by the other users in your organization to sign in.
Which anomaly detection policy should you use?

Impossible travel
Activity from anonymous IP addresses
Activity from infrequent country
Malware detection

Answer(s): C

Reference:

https://docs.microsoft.com/en-us/cloud-app-security/anomaly-detection-policy

Reveal Solution Next Question

Free SC-200 Exam Braindumps (page: 7)

QUESTION: 2

QUESTION: 2

Explanation:

QUESTION: 2

Reference:

QUESTION: 2

Reference:

SC-200 Discussions & Posts