MS-500 Exam Question 131

Your network contains an on-premises Active Directory domain. The domain contains the servers shown in the following table.

You plan to implement Azure Advanced Threat Protection (ATP) for the domain.
You install an Azure ATP standalone sensor on Server1.
You need to monitor the domain by using Azure ATP.
What should you do?
  • MS-500 Exam Question 132

    You plan to configure an access review to meet the security requirements for the workload administrators. You create an access review policy and specify the scope and a group.
    Which other settings should you configure? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    MS-500 Exam Question 133

    You have an Azure Sentinel workspace.
    You configure a rule to generate Azure Sentinel alerts when Azure Active Directory (Azure AD) Identity Protection detects risky sign-ins. You develop an Azure Logic Apps solution to contact users and verify whether reported risky sign-ins are legitimate.
    You need to configure the workspace to meet the following requirements:
    Call the Azure logic app when an alert is triggered for a risky sign-in.
    To the Azure Sentinel portal, add a custom dashboard that displays statistics for risky sign-ins that are detected and resolved.
    What should you configure in Azure Sentinel to meet each requirement? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    MS-500 Exam Question 134

    You have a Microsoft 365 Enterprise E5 subscription.
    You use Windows Defender Advanced Threat Protection (Windows Defender ATP).
    You need to integrate Microsoft Office 365 Threat Intelligence and Windows Defender ATP.
    Where should you configure the integration?
  • MS-500 Exam Question 135

    You need to configure threat detection for Active Directory. The solution must meet the security requirements.
    Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.