Free Preparation Discussions
MENU
Microsoft SC-200 Exam
- Topic 1: Mitigate threats using Azure Defender/ Identify and remediate security risks using Secure Score
- Topic 2: Identify and remediate security risks related to Conditional Access events/ manage data retention, alert notification, and advanced features
- Topic 3: Identify and remediate security risks related to Azure Active Directory/ Remediate incidents by using Azure Defender recommendations
- Topic 4: Identify and remediate security risks related to sign-in risk policies/ Identify data sources to be ingested for Azure Sentinel
- Topic 5: Detect, investigate, respond, and remediate identity threats/ Configure and manage custom detections and alerts
- Topic 6: Manage user data discovered during an investigation/ Assess and recommend insider risk policies
- Topic 7: Investigate Azure Defender alerts and incidents/ Configure device attack surface reduction rules
- Topic 8: Design and Configure Windows Events collections/ Manage data loss prevention policy alerts
- Topic 9: Design and configure an Azure Defender implementation/ Configure automated responses in Azure Security Center
- Topic 10: Identify, investigate, and remediate security risks related to privileged identities/ Design and configure playbook in Azure Defender
- Topic 11: Identify the prerequisites for a data connector/ Configure detection alerts in Azure AD Identity Protection
Free Microsoft SC-200 Exam Actual Questions
The questions for SC-200 were last updated On Sep. 12, 2023
You have an Azure subscription that uses Microsoft Defender for Servers Plan 1 and contains a server named Server1.
You enable agentless scanning.
You need to prevent Server1 from being scanned. The solution must minimize administrative effort.
What should you do?
You have an Azure subscription that uses Microsoft Defender for Servers Plan 1 and contains a server named Server1.
You enable agentless scanning.
You need to prevent Server1 from being scanned. The solution must minimize administrative effort.
What should you do?
You have an Azure subscription that contains an Microsoft Sentinel workspace.
You need to create a playbook that will run automatically in response to an Microsoft Sentinel alert.
What should you create first?
You have an Azure subscription that uses resource type for Cloud. You need to filter the security alerts view to show the following alerts:
* Unusual user accessed a key vault
* Log on from an unusual location
* Impossible travel activity
Which severity should you use?
You have an Azure subscription that contains an Microsoft Sentinel workspace.
You need to create a playbook that will run automatically in response to an Microsoft Sentinel alert.
What should you create first?
- Select Question Types you want
- Set your Desired Pass Percentage
- Allocate Time (Hours : Minutes)
- Create Multiple Practice tests with Limited Questions
- Customer Support
Submit Cancel