Practice SC-200 Exam Online

Question 1

You need to deploy the native cloud connector to Account! to meet the Microsoft Defender for Cloud requirements. What should you do in Account! first?

A : Create an AWS user for Defender for Cloud.

B : Create an Access control (1AM) role for Defender for Cloud.

C : Configure AWS Security Hub.

D : Deploy the AWS Systems Manager (SSM) agent

Answer: D

Question 2

You have an Azure subscription that uses Microsoft Defender for Endpoint.

You need to ensure that you can allow or block a user-specified range of IP addresses and URLs.

What should you enable first in the advanced features from the Endpoints Settings in the Microsoft 365 Defender portal?

A : endpoint detection and response (EDR) in block mode

B : custom network indicators

C : web content filtering

D : Live response for servers

Answer: A

Question 3

You have an Azure subscription that uses Microsoft Sentinel. You need to create a custom report that will visualise sign-in information over time. What should you create first?

A : a workbook

B : a hunting query

C : a notebook

D : a playbook

Answer: A

Question 4

Your company uses Azure Security Center and Azure Defender.

The security operations team at the company informs you that it does NOT receive email notifications for security alerts.
What should you configure in Security Center to enable the email notifications?

A : Security solutions

B : Security policy

C : Pricing & settings

D : Security alerts

E : Azure Defender

Answer: C

Question 5

You use Azure Sentinel.
You need to use a built-in role to provide a security analyst with the ability to edit the queries of custom Azure Sentinel workbooks. The solution must use the principle of least privilege.
Which role should you assign to the analyst?

A : Azure Sentinel Contributor

B : Security Administrator

C : Azure Sentinel Responder

D : Logic App Contributor

Answer: C

Name:	Microsoft Security Operations Analyst
Exam Code:	SC-200
Certification:	Security Operations Analyst Associate
Vendor:	Microsoft
Total Questions:	296
Last Updated:	Apr 29, 2024

Microsoft SC-200