SC-200 Practice Test

SC-200 Practice Test practice questions, page 17 of 20, with answer review and explanations.

Question 81

You have an Azure subscription that contains a Log Analytics workspace. You need to enable just-in-time (JIT) VM access and network detections for Azure resources. Where should you enable Azure Defender?

  1. at the subscription level
  2. at the workspace level
  3. at the resource level

Question 82

You use Azure Defender. You have an Azure Storage account that contains sensitive information. You need to run a PowerShell script if someone accesses the storage account from a suspicious IP address. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. From Azure Security Center, enable workflow automation.
  2. Create an Azure logic app that has a manual trigger.
  3. Create an Azure logic app that has an Azure Security Center alert trigger.
  4. Create an Azure logic app that has an HTTP trigger.
  5. From Azure Active Directory (Azure AD), add an app registration.

Question 83

You manage the security posture of an Azure subscription that contains two virtual machines name vm1 and vm2. The secure score in Azure Security Center is shown in the Security Center exhibit. (Click the Security Center tab.) Azure Policy assignments are configured as shown in the Policies exhibit. (Click the Policies tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Hot Area:

Question 84

You are informed of a new common vulnerabilities and exposures (CVE) vulnerability that affects your environment. You need to use Microsoft Defender Security Center to request remediation from the team responsible for the affected systems if there is a documented active exploit available. Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order. Select and Place:

Question 85

You use Azure Security Center. You receive a security alert in Security Center. You need to view recommendations to resolve the alert in Security Center. What should you do?

  1. From Security alerts, select the alert, select Take Action, and then expand the Prevent future attacks section.
  2. From Security alerts, select Take Action, and then expand the Mitigate the threat section.
  3. From Regulatory compliance, download the report.
  4. From Recommendations, download the CSV report.