Microsoft SC-200 Exam - Topic 7 Question 53 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 53
Topic #: 7

You have an Azure subscription that uses Microsoft Defender for Cloud. You need to filter the security alerts view to show the following alerts:

* Unusual user accessed a key vault

* Log on from an unusual location

* Impossible travel activity

Which severity should you use?

AInformational

BLow

CMedium

DHigh

Show Suggested Answer

Suggested Answer: C

by Ryan at Apr 23, 2023, 07:56 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Beatriz

5 months ago

Low severity? Nah, that doesn't seem right at all.

upvoted 0 times

...

Elke

6 months ago

I agree, High severity makes sense. Better safe than sorry!

upvoted 0 times

...

Rebbecca

6 months ago

Unusual access? Sounds like a big deal, but is it really that urgent?

upvoted 0 times

...

Boris

6 months ago

Definitely Medium severity for those types of alerts.

upvoted 0 times

...

Sena

6 months ago

I think the severity should be High. Those alerts are serious!

upvoted 0 times

...

Annabelle

6 months ago

If I recall correctly, unusual access and logon from strange locations typically indicate high risk, so I would lean towards high severity for this question.

upvoted 0 times

...

Glenna

6 months ago

I'm a bit confused about the severity levels. I thought low severity might apply to some alerts, but these seem more serious.

upvoted 0 times

...

Solange

6 months ago

I think I practiced a question like this, and I want to say that high severity is the right choice since these activities indicate potential breaches.

upvoted 0 times

...

Ronald

7 months ago

I remember that unusual user access and impossible travel are usually considered high severity, but I'm not sure if all of them fall under that.

upvoted 0 times

...

Noel

7 months ago

Okay, let me see. I think the asset severity levels in Prisma Cloud are Low, Medium, and High. I'm fairly confident that's the correct answer, but I'll double-check my notes just to be sure.

upvoted 0 times

...

Marci

7 months ago

I think the answer is D. Using Extract and Replicat with the GoldenGate Reverse utility sounds like the right approach to undo DML changes on the target database.

upvoted 0 times

...