Microsoft Exam SC-200 Topic 8 Question 56 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 56
Topic #: 8

[All SC-200 Questions]

You are configuring Azure Sentinel.

You need to send a Microsoft Teams message to a channel whenever a sign-in from a suspicious IP address is detected.

Which two actions should you perform in Azure Sentinel? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

AAdd a playbook.

BAssociate a playbook to an incident.

CEnable Entity behavior analytics.

DCreate a workbook.

EEnable the Fusion rule.

Show Suggested Answer

Suggested Answer: D

by Lonny at Jul 28, 2023, 11:30 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

15 hours ago

Creating a workbook might be useful for tracking and analyzing the data related to the sign-ins.

upvoted 0 times

...

7 days ago

I agree with Alyssa. Enabling the Fusion rule could also help in detecting suspicious IP addresses.

upvoted 0 times

...

13 days ago

I think we should add a playbook and associate it to an incident.

upvoted 0 times

...