You use Azure Sentinel.
You need to receive an immediate alert whenever Azure Storage account keys are enumerated. Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Suggested Answer: B, D
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
EL
Elizabeth
12 months ago
Agreed, analytics rule is a must-have!
WI
Wilda
1 year ago
I thought hunting queries were the way to go for alerts?
EL
Elli
1 year ago
Wait, can you really get alerts just from a livestream? Sounds off.
TH
Theola
1 year ago
Adding a data connector is also crucial.
DE
Delpha
1 year ago
Definitely need to create an analytics rule for that!
SU
Suzi
1 year ago
I don't think creating a hunting query is the right choice for immediate alerts. It seems more for investigation rather than proactive alerts.
SH
Shayne
1 year ago
I feel like I saw a question similar to this where we had to set up a livestream for real-time monitoring. Could that be relevant here?
KR
Kristofer
1 year ago
I'm not entirely sure, but I remember something about data connectors being important for alerts. Maybe that's part of it?
AL
Alyce
1 year ago
I think creating an analytics rule might be one of the actions we need to take. It sounds familiar from the practice questions.
MA
Marisha
1 year ago
This is a good one. I'll need to weigh the pros and cons of each answer choice and make sure I understand the implications of each potential change.
VI
Vincent
1 year ago
I feel pretty confident about this one. The key is to select all the options that logically follow after the data has been organized. Things like data visualization, search functionality, and information sharing seem like essential next steps.
CH
Chauncey
1 year ago
Hmm, this seems straightforward. I'll need to review the OpenShift project naming conventions to determine the correct options.