Exam SC-100 topic 1 question 31 discussion

Among the options provided, B. Enable self-healing in Microsoft 365 Defender is the one that aligns most closely with this goal. Self-healing capabilities in Microsoft 365 Defender can automatically detect, investigate, and remediate security threats, which would otherwise require manual intervention by SOC analysts. By automating these processes, you can minimize the operational load on Tier 1 analysts and allow them to focus on more complex security issues. Options A, C, and D are relevant to various aspects of security and compliance but don't specifically target the operational load on Tier 1 SOC analysts in the same way that option B does. Therefore, the correct answer is: B. Enable self-healing in Microsoft 365 Defender.

got this in exam 6oct23. passed with 896 marks. I answered B

To minimize the operational load on Tier 1 Microsoft Security Operations Center (SOC) analysts while designing a security operations strategy based on the Zero Trust framework, the recommended action is: B. Enable self-healing in Microsoft 365 Defender: Enabling self-healing capabilities in Microsoft 365 Defender can significantly reduce the operational load on Tier 1 SOC analysts. Self-healing features automate the detection and remediation of common security issues and threats, allowing for faster response times and reducing the need for manual intervention. By automating the remediation process, Tier 1 analysts can focus on more complex and critical security incidents, improving efficiency and productivity.

To minimize the operational load on Tier 1 Microsoft Security Operations Center (SOC) analysts as part of a Zero Trust security operations strategy, you should recommend enabling self-healing in Microsoft 365 Defender (Option B). Here's why this recommendation is appropriate: A. Enable built-in compliance policies in Azure Policy: While compliance policies are essential for maintaining security and compliance, they do not directly address minimizing the operational load on SOC analysts. These policies help in ensuring that resources are compliant with organizational standards but may require SOC analysts to review and remediate non-compliant resources.

ChatGPT says option C...

BBBBBBBBBBBBB

B is the correct answer

Would go for B

https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/self-healing-in-microsoft-365-defender/ba-p/1729527. https://techcommunity.microsoft.com/t5/microsoft-365-defender-blog/self-healing-in-microsoft-365-defender/ba-p/1729527