Free Microsoft SC-200 Exam Questions
Try our Free Demo Practice Tests for Comprehensive SC-200 Exam Preparation
-
Microsoft SC-200 Exam Questions
-
Provided By: Microsoft
- Exam: Microsoft Security Operations Analyst
- Certification: Security Operations Analyst Associate
-
Total Questions: 350
-
Updated On: Feb 22, 2025
-
Rated: 4.9 |
-
Online Users: 700
-
Question 1
-
You are configuring Azure Sentinel.
You need to send a Microsoft Teams message to a channel whenever an incident representing a sign-in risk event is activated in Azure Sentinel.
Which two actions should you perform in Azure Sentinel? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.
Answer: A,B
-
You are configuring Azure Sentinel.
-
Question 2
-
You have a Microsoft 365 subscription.You have 1,000 Windows devices that have a third-party antivirus product installed and MicrosoftDefender Antivirus in passive mode. You need to ensure that the devices are protected frommalicious artifacts that were undetected by the third-party antivirus product. Solution: You configureControlled folder access. Does this meet the goal?
Answer: B
-
You have a Microsoft 365 subscription.You have 1,000 Windows devices that have a third-party antivirus product installed and MicrosoftDefender Antivirus in passive mode. You need to ensure that the devices are protected frommalicious artifacts that were undetected by the third-party antivirus product. Solution: You configureControlled folder access. Does this meet the goal?
-
Question 3
-
You have an Azure subscription.
You need to stream the Microsoft Graph activity logs to a third-party security information and event management (SIEM) tool. The solution must minimize administrative effort.
To where should you stream the logs?
Answer: A
-
You have an Azure subscription.
-
Question 4
-
You have a Microsoft 365 subscription that uses Microsoft 365 Defender.You need to identify all the entities affected by an incident.Which tab should you use in the Microsoft 365 Defender portal?
Answer: C
-
-
Question 5
-
Your company has a single office in Istanbul and a Microsoft 365 subscription.
The company plans to use conditional access policies to enforce multi-factor authentication (MFA).
You need to enforce MFA for all users who work remotely.
What should you include in the solution?
Answer: C
-
Your company has a single office in Istanbul and a Microsoft 365 subscription.