ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 2 question 56 discussion

Actual exam question from Microsoft's SC-200
Question #: 56
Topic #: 2
[All SC-200 Questions]

You have an Azure subscription that uses Microsoft Defender for Cloud and contains 100 virtual machines that run Windows Server.

You need to configure Defender for Cloud to collect event data from the virtual machines. The solution must minimize administrative effort and costs.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

  • A. Configure auto-provisioning by setting the security event storage to Common.
  • B. From the Microsoft Endpoint Manager admin center, enable automatic enrollment.
  • C. From the Azure portal, create an Azure Event Grid subscription.
  • D. Configure auto-provisioning by setting the security event storage to All Events.
  • E. From Defender for Cloud in the Azure portal, enable Microsoft Defender for Servers.
Show Suggested Answer Hide Answer
Suggested Answer: AE 🗳️
by Faceless443 at Oct. 20, 2023, 7:58 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Faceless443
Highly Voted 1 year ago
Selected Answer: AE
Answer seems correct to me. A and E. Enable Auto-Provisioning from Defender for Cloud. And there you will be ask which Secrity Events should be stored. It is Nonne - Common - All. and yeah, without enabling Defender for servers in the Defender for Cloud Portal this won't work.
upvoted 5 times
...
sunilpanda
Most Recent 2 months, 2 weeks ago
Selected Answer: AE
why would one even think of Intune Manager when its just the Azure subsription
upvoted 1 times
...
Murtuza
10 months, 2 weeks ago
The question says to save costs so you need to choose COMMON and not ALL EVENTS
upvoted 1 times
...
TheHuman_
10 months, 3 weeks ago
Selected Answer: AE
Indeed, you need to activate Defender for Servers in order to configure it. In addition, we want to minimize administrative effort, so we want 'common' instead of 'all events'.
upvoted 4 times
...
chepeerick
1 year ago
Correct
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago