Microsoft Exam SC-200 Topic 10 Question 27 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 27
Topic #: 10

You have an Azure subscription that contains a virtual machine named VM1 and uses Azure Defender. Azure Defender has automatic provisioning enabled.

You need to create a custom alert suppression rule that will supress false positive alerts for suspicious use of PowerShell on VM1.

What should you do first?

AFrom Azure Security Center, add a workflow automation.

BOn VM1, run the Get-MPThreatCatalog cmdlet.

COn VM1 trigger a PowerShell alert.

DFrom Azure Security Center, export the alerts to a Log Analytics workspace.

Show Suggested Answer

Suggested Answer: C

by Serina at May 03, 2022, 09:35 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!