Exam SC-200 topic 2 question 16 discussion

Actual exam question from Microsoft's SC-200

Question #: 16
Topic #: 2

You use Azure Defender.
You have an Azure Storage account that contains sensitive information.
You need to run a PowerShell script if someone accesses the storage account from a suspicious IP address.
Which two actions should you perform? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. From Azure Security Center, enable workflow automation.
B. Create an Azure logic app that has a manual trigger.
C. Create an Azure logic app that has an Azure Security Center alert trigger.
D. Create an Azure logic app that has an HTTP trigger.
E. From Azure Active Directory (Azure AD), add an app registration.

Show Suggested Answer

Suggested Answer: AC 🗳️

by Eltooth at Sept. 21, 2021, 6:05 a.m.

Comments

Submit Cancel

Discuss4certi

Highly Voted 3 years, 7 months ago

A +C looks ok. Seems correct you want a security trigger for the login and you use this trigger to start the automation workflow with the powershellscript

upvoted 20 times

...

Tx4free

Highly Voted 3 years, 2 months ago

Selected Answer: AC

Best options

upvoted 8 times

...

Nikki0222

Most Recent 7 months, 2 weeks ago

AC correct

upvoted 1 times

...

talosDevbot

8 months, 1 week ago

Selected Answer: AC

One of the supported trigger for in the Logic App designer is "When a Defender for Cloud Alert is created or triggered" https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation

upvoted 2 times

...

Ramye

1 year, 4 months ago

Not sure how this question will be presented now that Azure security Center is Microsoft Defender for Cloud. Anyone seen this question with new Microsoft Defender for Cloud? Thx

upvoted 1 times

...

chepeerick

1 year, 7 months ago

Correct A + C

upvoted 1 times

...

tatendazw

1 year, 11 months ago

C. Create a logic app that you will be triggered in workflow automation A. Microsoft Defender for Cloud > Workflow automation > Add workflow automation, on the Action choose the Logic app you have created https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation#create-a-logic-app-and-define-when-it-should-automatically-run

upvoted 2 times

...