Microsoft SC-200 Exam - Topic 10 Question 24 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 24
Topic #: 10

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You are configuring Azure Sentinel.

You need to create an incident in Azure Sentinel when a sign-in to an Azure virtual machine from a malicious IP address is detected.

Solution: You create a livestream from a query.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-security-center

by Rhea at May 09, 2022, 02:46 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Therese

10 months ago

Just to clarify, we need a rule for incidents, not a livestream.

upvoted 0 times

...

Anjelica

10 months ago

No way, that's definitely not the right solution.

upvoted 0 times

...

Merilyn

11 months ago

Wait, I thought livestreams could do that?

upvoted 0 times

...

Elouise

11 months ago

Totally agree, that's not how incidents work.

upvoted 0 times

...

Carman

11 months ago

Creating a livestream from a query won't trigger an incident.

upvoted 0 times

...

Alesia

11 months ago

I remember discussing how to create incidents, but I can’t quite remember if a livestream counts. I guess I’ll have to go with my gut here.

upvoted 0 times

...

Tu

11 months ago

I recall that incidents are usually tied to alerts, and a livestream might just be for monitoring. I’m leaning towards "No" for this one.

upvoted 0 times

...

Della

11 months ago

I’m not entirely sure, but I feel like we practiced a similar question where we had to set up alerts based on specific conditions. This might be different.

upvoted 0 times

...

Jaleesa

11 months ago

I think creating a livestream from a query might not actually trigger an incident. I remember something about needing a specific alert rule for that.

upvoted 0 times

...

Tyra

11 months ago

I'm a bit confused on the difference between the options. Is uploading a new .phtml file the same as applying a new custom Footer Template?

upvoted 0 times

...

Maddie

11 months ago

Okay, let me think this through. The question is asking about a specific operational requirement for HMOs to qualify for federal certification. I'm leaning towards C, as it seems to cover the key elements of quality assurance and review by health professionals, but I'll double-check the other options just to be sure.

upvoted 0 times

...

Broderick

11 months ago

Okay, I think I've got this. The key is understanding that FCoE uses a special MAC address format, not the standard burned-in MAC address. I'm pretty sure option C is the correct answer, but I'll double-check the details.

upvoted 0 times

...

Sunny

11 months ago

Hmm, I'm a bit unsure about this one. I know "Payment" has a specific definition in HIPAA, but I can't quite remember all the details. I'll have to think this through carefully.

upvoted 0 times

...