HOTSPOT (Drag and Drop is not supported)Select the answer that correctly completes the sentence.Hot Area:
Answer(s): A
Box: analyticsMicrosoft Sentinel uses to correlate alerts into incidents. Microsoft Sentinel uses analytics to group alerts into incidents.The Fusion analytics rule creates incidents based on alert correlations made by the Fusion correlation engine.Incorrect:* huntingHunt by using built-in queriesYou can use the search and query tools in Microsoft Sentinel to hunt for security threats and tactics throughout your environment. These tools let you filter through large amounts of events and security data sources to identify potential threats or track down known or expected threats.The Hunting page in Microsoft Sentinel has built-in queries that can guide your hunting process and help you pursue the appropriate hunting paths to uncover issues in your environment. Hunting queries can expose issues that aren't significant enough on their own to generate an alert but have happened often enough over time to warrant investigation.* workbooksWorkbooks are used to visualize the data, potential issues and trends, and help create specific queries. These queries can help create rules called analytics. After creating analytic rules, you start to see Incidents, as well as process automated actions via Playbooks.
https://learn.microsoft.com/en-us/azure/sentinel/microsoft-sentinel-defender-portal https://learn.microsoft.com/en-us/training/modules/hunt-threats-sentinel/3-query-management-creation
What can you use to scan email attachments and forward the attachments to recipients only if the attachments are free from malware?
https://docs.microsoft.com/en-us/office365/servicedescriptions/office-365-advanced-threat-protection-service- description
Which feature provides the extended detection and response (XDR) capability of Azure Sentinel?
Answer(s): C
https://docs.microsoft.com/en-us/microsoft-365/security/defender/eval-overview?view=o365-worldwide
What can you use to provide threat detection for Azure SQL Managed Instance?
HOTSPOT (Drag and Drop is not supported)For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Post your Comments and Discuss Microsoft SC-900 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SC-900 content, but please register or login to continue.