Microsoft Certified: Security Operations Analyst Associate SC-200 Syllabus Exam Questions Answers

Microsoft Security Operations Analyst Questions and Answers

Question 37

You need to implement the Azure Information Protection requirements. What should you configure first?

Device health and compliance reports settings in Microsoft Defender Security Center

scanner clusters in Azure Information Protection from the Azure portal

content scan jobs in Azure Information Protection from the Azure portal

Advanced features from Settings in Microsoft Defender Security Center

Question 38

Which rule setting should you configure to meet the Microsoft Sentinel requirements?

From Set rule logic, turn off suppression.

From Analytic rule details, configure the tactics.

From Set rule logic, map the entities.

From Analytic rule details, configure the severity.

Question 39

You need to create the analytics rule to meet the Azure Sentinel requirements.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Question 40

You need to modify the anomaly detection policy settings to meet the Microsoft Defender for Cloud Apps requirements and resolve the reported problem.

Which policy should you modify?

Activity from suspicious IP addresses

Risky sign-in

Activity from anonymous IP addresses

Impossible travel