Microsoft Microsoft Certifications SC-200 Questions & Answers

• Question 241:

  HOTSPOT

  You have four Azure subscriptions. One of the subscriptions contains a Microsoft Sentinel workspace.

  You need to deploy Microsoft Sentinel data connectors to collect data from the subscriptions by using Azure Policy. The solution must ensure that the policy will apply to new and existing resources in the subscriptions.

  Which type of connectors should you provision, and what should you use to ensure that all the resources are monitored? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

  The policy will be applied to resources added in the future. To apply the policy on your existing resources as well, select the Remediation tab and mark the Create a remediation task check box https://learn.microsoft.com/en-us/azure/sentinel/connect-services-diagnostic-setting-based

• Question 242:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Teams.

  You need to perform a content search of Teams chats for a user by using the Microsoft Purview compliance portal. The solution must minimize the scope of the search.

  How should you configure the content search? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 243:

  HOTSPOT

  You have an Azure DevOps organization that uses Microsoft Defender for DevOps. The organization contains an Azure DevOps repository named Repo1 and an Azure Pipelines pipeline named Pipeline1. Pipeline1 is used to build and deploy

  code stored in Repo1.

  You need to ensure that when Pipeline1 runs, Microsoft Defender for Cloud can perform secret scanning of the code in Repo1.

  What should you install in the organization, and what should you add to the YAML file of Pipeline"!? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 244:

  HOTSPOT

  You have a Microsoft Sentinel workspace.

  A Microsoft Sentinel incident is generated as shewn in the following exhibit.

  

  Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 245:

  HOTSPOT

  You have an Azure subscription named Sub1 and an Azure DevOps organization named AzDO1. AzDO1 uses Defender for Cloud and contains a project that has a YAML pipeline named Pipeline1.

  Pipeline1 outputs the details of discovered open source software vulnerabilities to Defender for Cloud.

  You need to configure Pipeline to output the results of secret scanning to Defender for Cloud.

  What should you add to Pipeline1? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 246:

  HOTSPOT

  You have a Microsoft Sentinel workspace that has a default data retention period of 30 days. The workspace contains two custom tables as shown in the following table.

  

  Each table ingested two records per day during the past 365 days.

  You build KQL statements for use in analytic rules as shown in the following table.

  

  For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 247:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint.

  You have the on-premises devices shown in the following table.

  

  You are preparing an incident response plan for devices infected by malware. You need to recommend response actions that meet the following requirements:

  1.

  Block malware from communicating with and infecting managed devices.

  2.

  Do NOT affect the ability to control managed devices.

  Which actions should you use for each device? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 248:

  HOTSPOT

  You have the resources shown in the following table.

  

  You have an Azure subscription that uses Microsoft Defender for Cloud.

  You need to use Defender for Cloud to protect VM1 and Server1. The solution must meet the following requirements:

  1.

  Support Advanced Threat Protection and vulnerability assessment.

  2.

  Register each SQL Server 2022 instance as a SQL virtual machine.

  3.

  Minimize implementation and administrative effort.

  What should you deploy to each server? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 249:

  HOTSPOT

  You have an Azure subscription that contains 50 virtual machines.

  You plan to deploy Microsoft Defender for Cloud.

  You need to enable agentless scanning for 40 virtual machines. The solution must create disk snapshots of the virtual machines and perform out-of-band analysis of the snapshots.

  What should you do? To answer, select the appropriate options in the answer area.

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer:

  

• Question 250:

  HOTSPOT

  You have a Microsoft 365 E5 subscription that uses Microsoft Defender XDR and contains two users named User1 and User2.

  You need to ensure that the users can perform searches by using the Microsoft Purview portal. The solution must meet the following requirements:

  1.

  Ensure that User1 can search the Microsoft Purview Audit service logs and review the Microsoft Purview Audit service configuration.

  2.

  Ensure that User2 can search Microsoft Exchange Online mailboxes.

  3.

  Follow the principle of least privilege.

  To which Microsoft Purview role group should you add each user? To answer, select the appropriate options in the answer area

  NOTE: Each correct selection is worth one point.

  Hot Area:

  

  Correct Answer: