MENU
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You are configuring Azure Sentinel.
You need to create an incident in Azure Sentinel when a sign-in to an Azure virtual machine from a malicious IP address is detected.
Solution: You create a livestream from a query.
Does this meet the goal?
Suggested Answer: B
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
TH
Therese
12 months ago
Just to clarify, we need a rule for incidents, not a livestream.
AN
Anjelica
1 year ago
No way, that's definitely not the right solution.
ME
Merilyn
1 year ago
Wait, I thought livestreams could do that?
EL
Elouise
1 year ago
Totally agree, that's not how incidents work.
CA
Carman
1 year ago
Creating a livestream from a query won't trigger an incident.
AL
Alesia
1 year ago
I remember discussing how to create incidents, but I can’t quite remember if a livestream counts. I guess I’ll have to go with my gut here.
TU
Tu
1 year ago
I recall that incidents are usually tied to alerts, and a livestream might just be for monitoring. I’m leaning towards "No" for this one.
DE
Della
1 year ago
I’m not entirely sure, but I feel like we practiced a similar question where we had to set up alerts based on specific conditions. This might be different.
JA
Jaleesa
1 year ago
I think creating a livestream from a query might not actually trigger an incident. I remember something about needing a specific alert rule for that.
TY
Tyra
1 year ago
I'm a bit confused on the difference between the options. Is uploading a new .phtml file the same as applying a new custom Footer Template?
MA
Maddie
1 year ago
Okay, let me think this through. The question is asking about a specific operational requirement for HMOs to qualify for federal certification. I'm leaning towards C, as it seems to cover the key elements of quality assurance and review by health professionals, but I'll double-check the other options just to be sure.
BR
Broderick
1 year ago
Okay, I think I've got this. The key is understanding that FCoE uses a special MAC address format, not the standard burned-in MAC address. I'm pretty sure option C is the correct answer, but I'll double-check the details.
SU
Sunny
1 year ago
Hmm, I'm a bit unsure about this one. I know "Payment" has a specific definition in HIPAA, but I can't quite remember all the details. I'll have to think this through carefully.