ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 3 question 12 discussion

Actual exam question from Microsoft's SC-200
Question #: 12
Topic #: 3
[All SC-200 Questions]

You recently deployed Azure Sentinel.
You discover that the default Fusion rule does not generate any alerts. You verify that the rule is enabled.
You need to ensure that the Fusion rule can generate alerts.
What should you do?

  • A. Disable, and then enable the rule.
  • B. Add data connectors
  • C. Create a new machine learning analytics rule.
  • D. Add a hunting bookmark.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by karlEzio at Oct. 2, 2021, 7:48 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Eltooth
Highly Voted 3 years, 1 month ago
Correct - add data connectors to bring in source data for rules, notebooks, playbooks to query/take action against.
upvoted 15 times
...
karlEzio
Highly Voted 3 years, 1 month ago
The answer is Correct. By default, fusion is enabled. But to generate the alert, the data connectors must be configured.
upvoted 9 times
...
luisM14
Most Recent 9 months, 2 weeks ago
Selected Answer: B
correct
upvoted 1 times
...
chepeerick
1 year ago
Correct
upvoted 1 times
...
amsioso
2 years, 1 month ago
https://docs.microsoft.com/en-us/azure/sentinel/configure-fusion-rules
upvoted 2 times
...
Mockento
2 years, 2 months ago
Selected Answer: B
Best Option
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago