Microsoft Exam SC-200 Topic 8 Question 56 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 56
Topic #: 8

[All SC-200 Questions]

You are configuring Azure Sentinel.

You need to send a Microsoft Teams message to a channel whenever a sign-in from a suspicious IP address is detected.

Which two actions should you perform in Azure Sentinel? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

AAdd a playbook.

BAssociate a playbook to an incident.

CEnable Entity behavior analytics.

DCreate a workbook.

EEnable the Fusion rule.

Show Suggested Answer

Suggested Answer: D

by Lonny at Jul 28, 2023, 11:30 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

9 days ago

A and B are the correct answers. You need to create a playbook to send the Teams message, and then associate that playbook with an incident.

upvoted 0 times

1 days ago

A and B are the correct answers.

upvoted 0 times

...

21 days ago

Creating a workbook might be useful for tracking and analyzing the data related to the sign-ins.

upvoted 0 times

...

26 days ago

I agree with Alyssa. Enabling the Fusion rule could also help in detecting suspicious IP addresses.

upvoted 0 times

...

1 months ago

I think we should add a playbook and associate it to an incident.

upvoted 0 times

...