Discuss Microsoft SC-200 Exam Topic 1 Question 8

You provision a Linux virtual machine in a new Azure subscription.

You enable Azure Defender and onboard the virtual machine to Azure Defender.

You need to verify that an attack on the virtual machine triggers an alert in Azure Defender.

Which two Bash commands should you run on the virtual machine? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Acp /bin/echo ./asc_alerttest_662jfi039n

B./alerttest testing eicar pipe

Ccp /bin/echo ./alerttest

D./asc_alerttest_662jfi039n testing eicar pipe

Suggested Answer: A, D

https://docs.microsoft.com/en-us/azure/security-center/security-center-alert-validation#simulate-alerts-on-your- azure-vms-linux-

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Tonette 12 months ago

C looks like a valid option too, just saying!

Thaddeus 1 year ago

Wait, are we really using eicar for testing?

Lizbeth 1 year ago

Not so sure about D, seems a bit off.

Troy 1 year ago

Totally agree, B is definitely one of them!

Alyce 1 year ago

I think B and D are the right commands.

Vernice 1 year ago

I definitely remember that we need to run a command that includes "eicar" to simulate an attack. I think D is the one that does that, but I’m not certain about the other command.

Emogene 1 year ago

I’m a bit confused about the commands. I thought copying the echo command was part of the solution, but I can't remember if it was option A or C.

Thea 1 year ago

I practiced a similar question where we had to run commands to test security alerts. I feel like option D might be the right one, but I can't recall the other.

Garry 1 year ago

I think I remember something about using the EICAR test file to trigger alerts, but I'm not sure which command to use.

Sheridan 1 year ago

I've studied this topic before, so I think I've got a good handle on it. The key forwarding classes on the 7750 SR are real-time and assured, if I remember correctly. I'll double-check my answers, but I feel pretty good about this.

Glory 1 year ago

Schedule K seems like it would be the most challenging. There's just so much going on with the reinsurance information.

Deeann 1 year ago

This question seems straightforward - I think the key is to identify the option that best describes a value for money audit.

Sabine 1 year ago

I think DEF Ltd. having a B+ rating means it's not strictly speculative but I'm not completely sure if that's right.

Microsoft SC-200 Exam - Topic 1 Question 8 Discussion