Describe Capabilities of Microsoft Sentinel SC-900 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   How does Microsoft Sentinel detect threats using built-in analytics?

   • ABy applying machine learning models to identify anomalies in collected data
   • BBy requiring manual configuration of every detection rule
   • CBy monitoring network traffic in real time to block malicious packets
   • DBy scanning all files for malware signatures
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization needs to detect brute-force attacks against its Azure AD accounts. They want to use pre-built detection logic rather than writing custom queries. What should they use in Microsoft Sentinel?

   • ACustom workbooks
   • BBuilt-in analytics rules
   • CManual hunting queries
   • DWatchlists
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   A company wants to detect a potential data exfiltration attempt where a user uploads a large amount of data to an external cloud storage service. They want to use a prebuilt detection that does not require custom rule development. What should they use in Microsoft Sentinel?

   • AAzure Monitor metrics
   • BMicrosoft Defender for Cloud's vulnerability assessment
   • CBuilt-in analytics rule for data exfiltration
   • DAzure Policy
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   An organization wants to automate the response to phishing emails reported by users. The response should include deleting the email from all mailboxes and notifying the security team. What should they use in Microsoft Sentinel?

   • AAn analytics rule that creates an incident
   • BA workbook that shows reported emails
   • CA hunting query that finds the emails
   • DA playbook that integrates with Microsoft 365 Defender
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   Which feature of Microsoft Sentinel supports its SIEM role?

   • AAutomated password reset for user accounts
   • BBuilt-in connectors for ingesting logs from Microsoft 365 and Azure resources
   • CVirtual machine backup and restore capabilities
   • DNetwork traffic routing between virtual networks
   Reveal Solution Discussion Select an answer first