SC-200 Practice Test

Question 86

You have a suppression rule in Azure Security Center for 10 virtual machines that are used for testing. The virtual machines run Windows Server. You are troubleshooting an issue on the virtual machines. In Security Center, you need to view the alerts generated by the virtual machines during the last five days. What should you do?

1. Change the rule expiration date of the suppression rule.
2. Change the state of the suppression rule to Disabled.
3. Modify the filter for the Security alerts page.
4. View the Windows event logs on the virtual machines.

Question 87

You have an Azure Storage account that will be accessed by multiple Azure Function apps during the development of an application. You need to hide Azure Defender alerts for the storage account. Which entity type and field should you use in a suppression rule? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:

Question 88

You create an Azure subscription. You enable Azure Defender for the subscription. You need to use Azure Defender to protect on-premises computers. What should you do on the on-premises computers?

1. Install the Log Analytics agent.
2. Install the Dependency agent.
3. Configure the Hybrid Runbook Worker role.
4. Install the Connected Machine agent.

Question 89

A security administrator receives email alerts from Azure Defender for activities such as potential malware uploaded to a storage account and potential successful brute force attacks. The security administrator does NOT receive email alerts for activities such as antimalware action failed and suspicious network activity. The alerts appear in Azure Security Center. You need to ensure that the security administrator receives email alerts for all the activities. What should you configure in the Security Center settings?

1. the severity level of email notifications
2. a cloud connector
3. the Azure Defender plans
4. the integration settings for Threat detection

Question 90

You have an Azure Functions app that generates thousands of alerts in Azure Security Center each day for normal activity. You need to hide the alerts automatically in Security Center. Which three actions should you perform in sequence in Security Center? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point. Select and Place: