You use Azure Defender.
You have an Azure Storage account that contains sensitive information.
You need to run a PowerShell script if someone accesses the storage account from a suspicious IP address.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Suggested Answer: A, C
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
LA
Lashawnda
12 months ago
A and C are spot on! Surprised anyone would pick anything else.
KA
Katy
1 year ago
I thought Azure AD was involved here, but not sure about E.
MA
Margarita
1 year ago
Wait, why would you need an HTTP trigger? Seems unnecessary.
HE
Heike
1 year ago
I think B could work too, but not sure if it's the best option.
MI
Mitsue
1 year ago
Definitely A and C! That's the way to go.
JA
Jackie
1 year ago
I agree with Ines; the logic app with the alert trigger sounds right. But I’m not sure if we need to enable workflow automation as well.
FE
Fernanda
1 year ago
I'm a bit confused about the triggers. I thought a manual trigger wouldn't work here since we need it to be automatic based on suspicious access.
IN
Ines
1 year ago
I remember practicing a similar question where we had to set up alerts. I feel like creating a logic app with an Azure Security Center alert trigger could be the right choice.
RY
Ryan
1 year ago
I think enabling workflow automation from Azure Security Center is definitely part of the solution, but I'm not sure about the second action.
DY
Dyan
1 year ago
Hmm, this seems straightforward. I think the answer is C - vm01.vmx, since that's the main configuration file for a virtual machine.
ZO
Zoila
1 year ago
This seems like a good opportunity to demonstrate my system administration skills. I'll follow the steps carefully and make sure the NTP sync is properly configured.