Pass the Microsoft Microsoft Certified: Security Operations Analyst Associate SC-200 Questions and answers with CertsForce

Viewing page 2 out of 5 pages
Viewing questions 11-20 out of questions
Questions # 11:

You need to monitor the password resets. The solution must meet the Microsoft Sentinel requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 11


Expert Solution
Questions # 12:

You need to recommend remediation actions for the Azure Defender alerts for Fabrikam.

What should you recommend for each threat? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 12


Expert Solution
Questions # 13:

You need to remediate active attacks to meet the technical requirements.

What should you include in the solution?

Options:

A.

Azure Automation runbooks


B.

Azure Logic Apps


C.

Azure Functions

D Azure Sentinel livestreams


Expert Solution
Questions # 14:

The issue for which team can be resolved by using Microsoft Defender for Office 365?

Options:

A.

executive


B.

marketing


C.

security


D.

sales


Expert Solution
Questions # 15:

The issue for which team can be resolved by using Microsoft Defender for Endpoint?

Options:

A.

executive


B.

sales


C.

marketing


Expert Solution
Questions # 16:

You need to recommend a solution to meet the technical requirements for the Azure virtual machines. What should you include in the recommendation?

Options:

A.

just-in-time (JIT) access


B.

Azure Defender


C.

Azure Firewall


D.

Azure Application Gateway


Expert Solution
Questions # 17:

You need to implement Azure Sentinel queries for Contoso and Fabrikam to meet the technical requirements.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 17


Expert Solution
Questions # 18:

You need to complete the query for failed sign-ins to meet the technical requirements.

Where can you find the column name to complete the where clause?

Options:

A.

Security alerts in Azure Security Center


B.

Activity log in Azure


C.

Azure Advisor


D.

the query windows of the Log Analytics workspace


Expert Solution
Questions # 19:

You need to create an advanced hunting query to investigate the executive team issue.

How should you complete the query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question # 19


Expert Solution
Questions # 20:

You create a hunting query in Azure Sentinel.

You need to receive a notification in the Azure portal as soon as the hunting query detects a match on the query. The solution must minimize effort.

What should you use?

Options:

A.

a playbook


B.

a notebook


C.

a livestream


D.

a bookmark


Expert Solution
Viewing page 2 out of 5 pages
Viewing questions 11-20 out of questions