MENU
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
You have a virtual machine that runs Windows 10 and has the Log Analytics agent installed.
You need to simulate an attack on the virtual machine that will generate an alert.
What should you do first?
Suggested Answer: A
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
GL
Glory
11 months ago
I heard modifying settings can trigger alerts too!
CA
Carlee
11 months ago
Wait, can you really simulate an attack like that?
TY
Tyisha
12 months ago
Not sure about that, seems risky.
DE
Devorah
12 months ago
Yeah, that makes sense!
SK
Skye
1 year ago
I think option B is the way to go.
GA
Galen
1 year ago
Running the Log Analytics Troubleshooting Tool seems like a good first step, but I’m not confident it would simulate an attack effectively.
AS
Ashanti
1 year ago
I feel like modifying the settings of the Microsoft Monitoring Agent could be a step, but I can't recall if it directly leads to generating an alert.
ES
Estrella
1 year ago
I think copying an executable and renaming it sounds familiar. Didn’t we practice something like that in a lab session?
AN
Annamae
1 year ago
I remember we talked about simulating attacks in our last study group, but I’m not sure which option would actually trigger an alert.
KR
Kristofer
1 year ago
This looks like a tricky question. I'll need to carefully review the options to determine the best approach.
LA
Lashunda
1 year ago
Hmm, I'm a bit unsure about this one. The question is asking about a denormalized object, so I'll need to think carefully about which of these options fits that description.
MA
Marci
1 year ago
IP address and TCP port seems like the most straightforward approach to me. That should give a clear way to identify the video streaming traffic.