Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 7 question 1 discussion

Actual exam question from Microsoft's SC-200

Question #: 1
Topic #: 11

HOTSPOT -
You need to recommend remediation actions for the Azure Defender alerts for Fabrikam.
What should you recommend for each threat? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/key-vault/general/security-features https://docs.microsoft.com/en-us/azure/key-vault/general/secure-your-key-vault

by anonymous12356781 at Oct. 31, 2021, 4:15 p.m.

Comments

Submit Cancel

swgu

Highly Voted 2 years, 10 months ago

The answer is correct. If the key vault is there, there would be a policy too. We need to modify that policy. For external threats, we just need to update the "Network" section in the Key Vault configuration. So you don't have to go to NSG or Azure firewall for this.

upvoted 18 times

Lion007

2 years, 5 months ago

I agree with the explanation from swgu, correct answers.

upvoted 4 times

...

anonymous12356781

Highly Voted 3 years, 1 month ago

Can anybody here confirm if the question/answer is correct? The question says "You need to recommend remediation actions for the Azure Defender alerts for Fabrikam.", but the Technical Requirements says "Develop a procedure to remediate Azure Defender for Key Vault alerts for Contoso in case of external and internal threats. "

upvoted 8 times

Remilia

3 years ago

I'm not sure if anyone has gotten this far specially for those with no contributor role.

upvoted 3 times

Lion007

2 years, 5 months ago

Under Planned Changes: "Contoso plans to integrate the security operations of both companies and manage all security operations centrally." So the same procedures and recommend remediation actions for Contoso should be also considered for Fabrikam. It is a tricky question, but hey it is a scenario based question and all context should be considered.

upvoted 6 times

...

Fez786

1 year, 3 months ago

total pages are 47 currently. this question is on page 44. without contributor access, you cannot access 2nd half, so this question will not be showing for users who have no contributor access.

upvoted 2 times

...

bull_monk

2 years, 12 months ago

I've got the same question

upvoted 1 times

...

Ramye

Most Recent 9 months, 2 weeks ago

Answers seem correct but under the technical requirements, it refers to Contoco and not Fabrikam. Just pointing this out.

upvoted 2 times

...

chepeerick

1 year, 1 month ago

Correct option

upvoted 1 times

...

danb67

1 year, 1 month ago

I think correct based on https://techcommunity.microsoft.com/t5/microsoft-defender-for-cloud/automation-for-responding-to-microsoft-defender-for-key-vault/ba-p/3539417

upvoted 1 times

...

Remilia

3 years ago

For this question the Internal Threat the options are the following from other sources: - Add resource locks to the key vault - Modify the access policy settings for the key vault - Modify the RBAC (Role Based Access Control) settings for the key vault the last one is the correct answer

upvoted 8 times

...