Microsoft SC-200 Exam - Topic 4 Question 89 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 89
Topic #: 4

You have a Microsoft 365 subscription that uses Microsoft Defender XDR.

You discover that when Microsoft Defender for Endpoint generates alerts for a commonly used executable file, it causes alert fatigue. You need to tune the alerts.

Which two actions can an alert tuning rule perform for the alerts?

Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Adelete

Bhide

Cresolve

Dmerge

Eassign

Show Suggested Answer

Suggested Answer: B, C

by Ming at Jan 12, 2025, 09:55 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Jodi

8 months ago

Wait, can you really delete alerts? That seems risky.

upvoted 0 times

...

Ezekiel

9 months ago

Hiding alerts is a good way to reduce fatigue!

upvoted 0 times

...

Danilo

9 months ago

I thought merging alerts was an option too?

upvoted 0 times

...

Shoshana

9 months ago

Totally agree, those options make sense!

upvoted 0 times

...

Brynn

9 months ago

You can delete and resolve alerts.

upvoted 0 times

...

Arlyne

10 months ago

I vaguely recall that "assign" could be used to manage alerts, but I can't remember if it's specifically for tuning.

upvoted 0 times

...

Royce

10 months ago

I practiced a similar question where we had to choose actions for alerts, and I feel like "hide" might be a good option here.

upvoted 0 times

...

Rosina

10 months ago

I think "resolve" could definitely be one of the actions, but I'm a bit uncertain about "merge."

upvoted 0 times

...

Erin

10 months ago

I remember we discussed alert tuning rules in class, but I'm not sure if "delete" is a valid action.

upvoted 0 times

...

I feel confident about this question. Based on my understanding of Microsoft Defender XDR, the two actions that can be performed by the alert tuning rules are "hide" and "delete". I'll double-check my answer, but I think I've got a good handle on this.

upvoted 0 times

...

Eden

10 months ago

This is a tricky one. I know alert tuning is crucial, but the wording of the question makes me pause. I'll need to read through the options thoroughly and make sure I understand the implications of each action.

upvoted 0 times

...

Reyes

10 months ago

Okay, I've got this. The key is to identify the actions that can be performed by the alert tuning rules to address the issue of alert fatigue. I'll carefully consider each option and select the two that best fit the scenario.

upvoted 0 times

...

Angella

10 months ago

Hmm, I'm a bit unsure about this one. I know alert tuning is important, but I'm not familiar with the specific actions that can be performed. I'll need to think this through carefully.

upvoted 0 times

...

Arleen

10 months ago

This looks like a straightforward question about alert tuning in Microsoft Defender XDR. I'll need to carefully review the options and think through the capabilities of the alert tuning rules.

upvoted 0 times

...

Elbert

2 years ago

As an alert-aholic, I'm gonna have to go with B and C. Hiding the less important ones and resolving the redundant ones will keep my dashboard nice and tidy.

upvoted 0 times

Verda

1 year ago

User 4: It's important to prioritize and manage alerts efficiently.

upvoted 0 times

...

Terrilyn

1 year ago

User 3: I always make sure to keep my dashboard tidy by hiding and resolving alerts.

upvoted 0 times

...

Martina

1 year ago

User 2: Definitely, it helps in reducing alert fatigue.

upvoted 0 times

...

Yesenia

1 year ago

User 1: I agree, hiding and resolving alerts is key.

upvoted 0 times

...

Jess

2 years ago

This is a classic case of 'too much of a good thing.' B and D are the way to go - hide the noise and merge the related alerts. Efficiency is key!

upvoted 0 times

...

Rosamond

2 years ago

Haha, I'm just hoping they don't choose A and delete everything! That would be one way to solve the problem, I guess. But B and D get my vote.

upvoted 0 times

Cassi

1 year ago

I think hiding or merging the alerts would definitely help reduce the alert fatigue. Good choices!

upvoted 0 times

...

Allene

1 year ago

I agree, deleting everything would be a bit extreme. Hiding or merging the alerts seems like a better solution.

upvoted 0 times

...

Samira

2 years ago

I'm going with B and E. Hiding the alerts and assigning them to the right people will ensure they get the attention they need without drowning in a sea of notifications.

upvoted 0 times

...

Jacquelyne

2 years ago

B and D seem like the best options to reduce alert fatigue. Hiding the less important alerts and merging similar ones can definitely help streamline the process.

upvoted 0 times

Lawrence

1 year ago

Yes, those actions can definitely help prioritize and streamline the alerts we receive.

upvoted 0 times

...

Jerrod

2 years ago

I agree, hiding and merging alerts can make a big difference in reducing alert fatigue.

upvoted 0 times

...

Brande

2 years ago

True, resolving alerts quickly can also help in managing the alert volume effectively.

upvoted 0 times

...

William

2 years ago

I think assigning alerts could also be helpful in prioritizing which ones to focus on first.

upvoted 0 times

...

Carmen

2 years ago

I agree, hiding and merging alerts can make a big difference in reducing alert fatigue.

upvoted 0 times

...

Amber

2 years ago

That's a good point, merging alerts could definitely help streamline the alert process and make it more manageable.

upvoted 0 times

...

Haydee

2 years ago

I disagree, I believe the answer is D) merge because merging alerts can help consolidate similar alerts and reduce the overall number of alerts generated.

upvoted 0 times

...

Amber

2 years ago

I think the answer is B) hide because it can help reduce alert fatigue by hiding alerts for commonly used executable files.

upvoted 0 times

...