You need to create the test rule to meet the Azure Sentinel requirements. What should you do when you create the rule? A. From Set rule logic, turn off suppression. B. From Analytics rule details, configure the tactics. C. From…
You need to assign a role-based access control (RBAC) role to admin! to meet the Azure Sentinel requirements and the business requirements. Which role should you assign? A. Automation Operator B. Automation Run book Operator C. Azure Sentinel Contributor D.…
Case study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam.…
You need to complete the query for failed sign-ins to meet the technical requirements. Where can you find the column name to complete the where clause? A. Security alerts in Azure Security Center B. Activity log in Azure C. Azure…
HOTSPOT You need to implement Azure Sentinel queries for Contoso and Fabrikam to meet the technical requirements. What should you include in the solution? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth…
HOTSPOT You need to create an advanced hunting query to investigate the executive team issue. How should you complete the query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot…
You need to remediate active attacks to meet the technical requirements. What should you include in the solution? A. Azure Automation runbooks B. Azure Logic Apps C. Azure Functions D. Azure Sentinel livestreams
Case study This is a case study. Case studies are not timed separately. You can use as much exam time as you would like to complete each case. However, there may be additional case studies and sections on this exam.…
HOTSPOT You have an Azure subscription that uses Azure Defender. You plan to use Azure Security Center workflow automation to respond to Azure Defender threat alerts. You need to create an Azure policy that will perform threat remediation automatically. What…
DRAG DROP You have an Azure subscription. You need to delegate permissions to meet the following requirements: Enable and disable Azure Defender. Apply security recommendations to resource. The solution must use the principle of least privilege. Which Azure Security Center…