exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 7 question 1 discussion

Actual exam question from Microsoft's SC-200
Question #: 1
Topic #: 11
[All SC-200 Questions]

HOTSPOT -
You need to recommend remediation actions for the Azure Defender alerts for Fabrikam.
What should you recommend for each threat? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/security-features https://docs.microsoft.com/en-us/azure/key-vault/general/secure-your-key-vault

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
swgu
Highly Voted 2 years, 9 months ago
The answer is correct. If the key vault is there, there would be a policy too. We need to modify that policy. For external threats, we just need to update the "Network" section in the Key Vault configuration. So you don't have to go to NSG or Azure firewall for this.
upvoted 18 times
Lion007
2 years, 4 months ago
I agree with the explanation from swgu, correct answers.
upvoted 4 times
...
...
anonymous12356781
Highly Voted 2 years, 12 months ago
Can anybody here confirm if the question/answer is correct? The question says "You need to recommend remediation actions for the Azure Defender alerts for Fabrikam.", but the Technical Requirements says "Develop a procedure to remediate Azure Defender for Key Vault alerts for Contoso in case of external and internal threats. "
upvoted 8 times
Remilia
2 years, 11 months ago
I'm not sure if anyone has gotten this far specially for those with no contributor role.
upvoted 3 times
Lion007
2 years, 4 months ago
Under Planned Changes: "Contoso plans to integrate the security operations of both companies and manage all security operations centrally." So the same procedures and recommend remediation actions for Contoso should be also considered for Fabrikam. It is a tricky question, but hey it is a scenario based question and all context should be considered.
upvoted 6 times
...
Fez786
1 year, 1 month ago
total pages are 47 currently. this question is on page 44. without contributor access, you cannot access 2nd half, so this question will not be showing for users who have no contributor access.
upvoted 2 times
...
...
bull_monk
2 years, 10 months ago
I've got the same question
upvoted 1 times
...
...
Ramye
Most Recent 7 months, 4 weeks ago
Answers seem correct but under the technical requirements, it refers to Contoco and not Fabrikam. Just pointing this out.
upvoted 2 times
...
chepeerick
12 months ago
Correct option
upvoted 1 times
...
danb67
1 year ago
I think correct based on https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/automation-for-responding-to-microsoft-defender-for-key-vault/ba-p/3539417
upvoted 1 times
...
Remilia
2 years, 11 months ago
For this question the Internal Threat the options are the following from other sources: - Add resource locks to the key vault - Modify the access policy settings for the key vault - Modify the RBAC (Role Based Access Control) settings for the key vault the last one is the correct answer
upvoted 8 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago