Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

Microsoft SC-200 Exam - Topic 2 Question 99 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 99
Topic #: 2

[All SC-200 Questions]

You need to create the test rule to meet the Azure Sentinel requirements. What should you do when you create the rule?

AFrom Set rule logic, turn off suppression.

BFrom Analytics rule details, configure the tactics.

CFrom Set rule logic, map the entities.

DFrom Analytics rule details, configure the severity.

Show Suggested Answer

Suggested Answer: C

https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom

by Shaunna at Aug 03, 2025, 01:01 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

An

9 months ago

Totally agree with B, tactics are key!

upvoted 0 times

...

Bette

9 months ago

Surprised that suppression is even an option!

upvoted 0 times

...

Abel

9 months ago

I think mapping the entities is more important.

upvoted 0 times

...

Cecilia

10 months ago

Not sure about D, severity can be subjective.

upvoted 0 times

...

Dorothy

10 months ago

You definitely need to configure the tactics!

upvoted 0 times

...

Loreen

10 months ago

I definitely remember that suppression can affect how rules trigger, but I’m not clear on whether we should turn it off or leave it on for this scenario.

upvoted 0 times

...

Brianne

11 months ago

I practiced a similar question where we had to set the severity, but I’m confused if that’s the main focus here or if it’s about suppression.

upvoted 0 times

...

Annabelle

11 months ago

I feel like mapping the entities is important, but I can't recall if it’s specifically in the rule logic or somewhere else.

upvoted 0 times

...

Ollie

11 months ago

I think I remember something about configuring tactics in the analytics rule details, but I'm not entirely sure if that's the right step for creating the test rule.

upvoted 0 times

...

Lizbeth

11 months ago

This one's got me a little stumped. I know Azure Sentinel is all about security, but I'm not totally clear on the specific requirements here. I'll try to eliminate the options that don't seem to fit and go from there.

upvoted 0 times

...

Alisha

11 months ago

Alright, time to put on my thinking cap. I'm a bit unsure about the exact steps, but I'll try to break it down logically. Mapping entities and configuring the severity seem like good places to start.

upvoted 0 times

...

Mari

11 months ago

Okay, let's see. The question is asking about creating a test rule, so I'm guessing I need to look at the "Set rule logic" and "Analytics rule details" sections. Suppression, tactics, and severity all seem relevant.

upvoted 0 times

...

Jose

12 months ago

Hmm, this seems straightforward. I think the key is to focus on the Azure Sentinel requirements mentioned in the question. Let me think this through carefully.

upvoted 0 times

...

Fabiola

12 months ago

C is the one for me. Mapping the entities in the Set rule logic is crucial to ensure the rule is properly defined.

upvoted 0 times

...

Roselle

1 year ago

I think option B is the way to go. Configuring the tactics in the Analytics rule details seems like the most relevant step for meeting Azure Sentinel requirements.

upvoted 0 times

Tequila

8 months ago

Mapping entities in option C shouldn't be overlooked either!

upvoted 0 times

...

Gladys

9 months ago

True, but tactics guide the overall strategy.

upvoted 0 times

...

Tresa

9 months ago

I agree, option B is crucial for setting up the rule.

upvoted 0 times

...

Floyd

10 months ago

But what about option D? Severity is important too.

upvoted 0 times

...

...

Chuck

1 year ago

I agree with Magnolia, mapping the entities is important for meeting the requirements.

upvoted 0 times

...

Magnolia

1 year ago

I think we should map the entities when creating the rule.

upvoted 0 times

...