From Azure Security Center, you create a custom alert rule. You need to configure which users will receive an email message when the alert is triggered. What should you do?
A.
From Azure Monitor, create an action group.
B.
From Security Center, modify the Security policy settings of the Azure subscription.
C.
From Azure Active Directory (Azure AD), modify the members of the Security Reader role group.
An action group is a collection of notification preferences defined by the owner of an Azure subscription. Azure Monitor and Service Health alerts use action groups to notify users that an alert has been triggered. Various alerts may use the same action group or different action groups depending on the user's requirements.
What I can see now, I can set the emails for users who get a notification:
from MS Defender for Cloud - environmental settings - select the subscription - email notifications
Custom alerts should be done through Workflow Automation (left panel), the automation is executed based on new alerts on Microsoft Defender for Cloud. This question is outdated, I just hope it's not part of the exam. :)
I think this queston is a bit obsolete. I wasnt able to find a place in Security Center where I can create the custom rules. The only option avaiable is in Pricing & Settings
what about this
https://docs.microsoft.com/en-us/azure/security-center/security-center-provide-security-contact-details
email notifications for security alerts from security center. pricing & settings
Answer: A (By elimination)
A: Correct - assumes ASC is configured to stream logs to Azure monitor.
B: Incorrect - (badly worded) - "security policy defines the desired configuration of your workloads and helps ensure you're complying with the security requirements of your company or regulators" - nothing to do with alerts
C: Incorrect - Security Reader role group membership does not imply receiving email notifications
D: Incorrect - Security Center alert rules don't specify recipients.
Best solution would be to use ASC Pricing and Settings, which sadly isn't an option
Notes
Azure Security Center | Pricing and Settings allows direct configuration of email alerts
https://docs.microsoft.com/en-us/azure/security-center/security-center-provide-security-contact-details
More complicated to configure Azure Monitor integration
https://charbelnemnom.com/how-to-integrate-azure-security-center-with-azure-monitor-alerts/
Creating custom alerts, emails are triggered on the selected severity, as with inbuilt rules
https://www.microsoftpressstore.com/articles/article.aspx?p=2923216&seqNum=3
I believe answer is correct, by elimination, but I think best way to set notifications is to go to Pricing & Setting in ASC and Settings | Email notifications.
Custom alerts were in preview and are deprecated as of end of June 2019. https://docs.microsoft.com/en-us/azure/security-center/security-center-features-retirement-july2019#menu_investigate
upvoted 3 times
...
This section is not available anymore. Please use the main Exam Page.AZ-500 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
dumpmaster
Highly Voted 5 years, 1 month agocunlu
Highly Voted 4 years, 4 months agoschpeter_091
Most Recent 5 months, 1 week agoESAJRR
1 year, 7 months agoMugamed
1 year, 11 months agomajstor86
2 years, 1 month agoTombarc
3 years, 3 months agodanlo
2 years, 4 months agoIncredible99
3 years, 5 months agovaaws
3 years, 8 months agovj77
3 years, 8 months agoMarioMK
3 years, 11 months agoPayday123
3 years, 2 months agoCyberbug2021
4 years agoinf
4 years, 3 months agoinf
4 years, 3 months agoAwraith
4 years, 9 months agohstorm
4 years, 7 months agojoilec435
4 years, 12 months agoJohnCrawford
5 years, 6 months ago