Microsoft Exam SC-200 Topic 2 Question 63 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 63
Topic #: 2

[All SC-200 Questions]

You have an Azure subscription that uses Microsoft Defender for Servers Plan 1 and contains a server named Server1.

You enable agentless scanning.

You need to prevent Server1 from being scanned. The solution must minimize administrative effort.

What should you do?

ACreate an exclusion tag.

BUpgrade the subscription to Defender for Servers Plan 2.

CCreate a governance rule.

DCreate an exclusion group.

Show Suggested Answer

Suggested Answer: D

by Dalene at Dec 26, 2023, 09:00 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Laurene

11 months ago

I don't know, I'm kind of torn on this one. Sure, the exclusion group seems like the easiest option, but what if we need to keep an eye on Server1 for some reason? Upgrading to Defender for Servers Plan 2 might give us more granular control over the scanning, you know? Either way, it's going to be a balancing act between security and convenience.

upvoted 0 times

...

Krystal

11 months ago

Ah, the age-old question of how to avoid the watchful eye of the security team. But in all seriousness, I think you guys are on the right track. Creating an exclusion group is the way to go here. It's like having a secret clubhouse for your servers - they can hang out there, away from the prying eyes of the scanners.

upvoted 0 times

Eric

11 months ago

D: Exactly. Server1 can chill in the exclusion group while the scanners do their thing without bothering it.

upvoted 0 times

...

Wilda

11 months ago

C: Agreed. It's like giving Server1 its own VIP area.

upvoted 0 times

...

Roselle

11 months ago

B: Yeah, creating an exclusion group sounds like the best way to keep Server1 off the radar.

upvoted 0 times

...

Blossom

11 months ago

A: That's a good point. It's important to keep Server1 hidden from the scans.

upvoted 0 times

...

Gilma

11 months ago

D: Create an exclusion group.

upvoted 0 times

...

Darnell

11 months ago

C: Create a governance rule.

upvoted 0 times

...

Cordelia

11 months ago

B: Upgrade the subscription to Defender for Servers Plan 2.

upvoted 0 times

...

Ilene

11 months ago

A: Create an exclusion tag.

upvoted 0 times

...

Lenora

11 months ago

I agree, option D does seem like the most logical choice here. It's like creating a VIP list for your servers - the ones that don't need to be scanned can just hang out in the exclusion group and avoid the paparazzi. Plus, it's probably easier to manage than creating a bunch of individual exclusion tags or rules.

upvoted 0 times

...

Angella

11 months ago

Hmm, this is an interesting one. Agentless scanning - that means the servers are being monitored without any software installed on them, right? So we need to find a way to exclude Server1 from this, but with minimal administrative effort. I'm thinking option D - creating an exclusion group - might be the way to go. That way, we can easily add or remove servers from the exclusion without having to configure each one individually.

upvoted 0 times

...