Black Friday Special 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: Board70

Free Access Microsoft SC-200 New Release

Page: 6 / 13
Question 24

You have a Microsoft Sentinel workspace named SW1.

You need to identify which anomaly rules are enabled in SW1.

What should you review in Microsoft Sentine1?

Options:

A.

Settings

B.

Entity behavior

C.

Analytics

D.

Content hub

Question 25

You have an Azure subscription that contains a resource group named RG1. RG1 contains a Microsoft Sentinel workspace. The subscription is linked to a Microsoft Entra tenant that contains a user named User1.

You need to ensure that User1 can deploy and customize Microsoft Sentine1 workbook templates. The solution must follow the principle of least privilege.

Which role should you assign to User1 for RG1?

Options:

A.

Workbook Contributor

B.

Microsoft Sentinel Contributor

C.

Contributor

D.

Microsoft Sentinel Automation Contributor

Question 26

You have a Microsoft 365 E5 subscription that uses Microsoft 365 Defender for Endpoint.

You need to ensure that you can initiate remote shell connections to Windows servers by using the Microsoft 365 Defender portal.

What should you configure? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Options:

Question 27

Your company has a single office in Istanbul and a Microsoft 365 subscription.

The company plans to use conditional access policies to enforce multi-factor authentication (MFA).

You need to enforce MFA for all users who work remotely.

What should you include in the solution?

Options:

A.

a fraud alert

B.

a user risk policy

C.

a named location

D.

a sign-in user policy

Page: 6 / 13
Exam Code: SC-200
Exam Name: Microsoft Security Operations Analyst
Last Update: Nov 24, 2024
Questions: 294
SC-200 pdf

SC-200 PDF

$28.5  $94.99
SC-200 Engine

SC-200 Testing Engine

$33  $109.99
SC-200 PDF + Engine

SC-200 PDF + Testing Engine

$43.5  $144.99