MENU
You have an Azure subscription that contains a virtual machine named VM1 and uses Azure Defender. Azure Defender has automatic provisioning enabled.
You need to create a custom alert suppression rule that will supress false positive alerts for suspicious use of PowerShell on VM1.
What should you do first?
Suggested Answer: C
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
DA
Daniel
12 months ago
I thought we needed to run a cmdlet first, like option B?
EL
Elroy
1 year ago
Wait, can you really suppress alerts like that? Sounds risky.
CO
Cordell
1 year ago
Not so sure about A, what about option D?
VA
Vallie
1 year ago
Definitely agree with A, it makes the most sense!
LO
Lore
1 year ago
I think option A is the way to go.
VE
Velda
1 year ago
I’m a bit confused about the cmdlet. I remember Get-MPThreatCatalog being related to threat management, but I’m not sure if it’s relevant for creating a suppression rule.
AL
Aleisha
1 year ago
I feel like exporting alerts to Log Analytics was mentioned in a similar practice question, but I can't recall if that's the initial action we need to take here.
KR
Kristel
1 year ago
I think we practiced a question where we had to trigger an alert first before suppressing it. So maybe option C could be the right choice?
CA
Carlota
1 year ago
I remember something about using Azure Security Center for alert management, but I'm not sure if adding a workflow automation is the first step.
CL
Clay
1 year ago
This seems tricky, but I'll take my time and methodically go through the options. I'm confident I can get the right answer if I think it through step-by-step.
VI
Vincenza
1 year ago
Intra-storage device vertical tiering sounds familiar, but I can't recall if it ties into ensuring continuous data access like the question asks.
DY
Dylan
1 year ago
I think the answer might be "service registry," but I'm not entirely sure.
VA
Vallie
1 year ago
The key here is understanding how to set up the event-driven ETL pipeline. I'll focus on that part of the requirements.
FA
Fausto
1 year ago
This question seems straightforward. I think the key is to identify the service-orientation principle that would have addressed the issue of the service not being designed to participate in more than one service composition.