SC-200 Exam Question 226

A security administrator receives email alerts from Azure Defender for activities such as potential malware uploaded to a storage account and potential successful brute force attacks.
The security administrator does NOT receive email alerts for activities such as antimalware action failed and suspicious network activity. The alerts appear in Azure Security Center.
You need to ensure that the security administrator receives email alerts for all the activities.
What should you configure in the Security Center settings?
  • SC-200 Exam Question 227

    You create a new Azure subscription and start collecting logs for Azure Monitor.
    You need to configure Azure Security Center to detect possible threats related to sign-ins from suspicious IP addresses to Azure virtual machines. The solution must validate the configuration.
    Which three actions should you perform in a sequence? To answer, move the appropriate actions from the list of action to the answer area and arrange them in the correct order.

    SC-200 Exam Question 228

    You have the following SQL query.

    SC-200 Exam Question 229

    You have a custom detection rule that includes the following KQL query.

    For each of the following statements, select Yes if True. Otherwise select No.
    NOTE: Each correct selection is worth one point.

    SC-200 Exam Question 230

    From Azure Sentinel, you open the Investigation pane for a high-severity incident as shown in the following exhibit.

    Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
    NOTE: Each correct selection is worth one point.