<< Prev Question Next Question >>

Question 126/144

You have a Microsoft 365 subscription that uses Microsoft Defender for Cloud Apps and has Cloud Discovery enabled.
You need to enrich the Cloud Discovery data. The solution must ensure that usernames in the Cloud Discovery traffic logs are associated with the user principal name (UPN) of the corresponding Microsoft Entra ID user accounts.
What should you do first?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (144q)
Question 1: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 2: You have an Azure subscription that uses Microsoft Defender ...
Question 3: You haw the resources shown in the following Table. (Exhibit...
Question 4: You need to correlate data from the SecurityEvent Log Anaryt...
Question 5: You have an Azure subscription that contains an Microsoft Se...
Question 6: You have an Azure subscription that use Microsoft Defender f...
Question 7: You have a Microsoft Sentinel workspace. You receive multipl...
Question 8: You need to create a query to investigate DNS-related activi...
Question 9: You need to restrict cloud apps running on CLIENT1 to meet t...
Question 10: You plan to connect an external solution that will send Comm...
Question 11: Note: This question is part of a series of questions that pr...
Question 12: You need to recommend remediation actions for the Azure Defe...
Question 13: Note: This question is part of a series of questions that pr...
Question 14: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 15: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 16: You plan to create a custom Azure Sentinel query that will t...
Question 17: You use Azure Security Center. You receive a security alert ...
Question 18: You use Microsoft Sentinel. You need to receive an alert in ...
Question 19: You have an Azure Sentinel workspace. You need to test a pla...
Question 20: You have a Microsoft 365 B5 subscription that uses Microsoft...
Question 21: You have a custom analytics rule to detect threats in Azure ...
Question 22: Note: This question is part of a series of questions that pr...
Question 23: You have a Microsoft Sentinel workspace that uses the Micros...
Question 24: You have a Microsoft Sentinel workspace named SW1. In SW1, y...
Question 25: You have a custom detection rule that includes the following...
Question 26: You deploy Azure Sentinel. You need to implement connectors ...
Question 27: You have a custom Microsoft Sentinel workbook named Workbook...
Question 28: You need to meet the Microsoft Sentinel requirements for col...
Question 29: You have an Azure subscription that contains an Azure logic ...
Question 30: You need to deploy the native cloud connector to Account! to...
Question 31: You have a Microsoft Sentinel workspace. You have a query na...
Question 32: You need to implement Azure Defender to meet the Azure Defen...
Question 33: You have a Microsoft Sentinel workspace that contains the fo...
Question 34: You have an Azure subscription that contains a Log Analytics...
Question 35: You have a Microsoft 365 E5 subscription that contains 100 L...
Question 36: You are informed of a new common vulnerabilities and exposur...
Question 37: You have 50 Microsoft Sentinel workspaces. You need to view ...
Question 38: You have an Azure subscription that contains the following r...
Question 39: You have a Microsoft 365 subscription that uses Microsoft Pu...
Question 40: You have a Microsoft 365 subscription that uses Microsoft De...
Question 41: You have a Microsoft 365 subscription. You have 1,000 Window...
Question 42: You have a Microsoft 365 E5 subscription. You plan to perfor...
Question 43: You are informed of an increase in malicious email being rec...
Question 44: You have an Azure subscription that uses Microsoft Defender ...
Question 45: You need to meet the Microsoft Sentinel requirements for App...
Question 46: You have the resources shown in the following table. (Exhibi...
Question 47: You have a Microsoft Sentinel workbook that contains the fol...
Question 48: You have an Azure subscription that is linked to a hybrid Az...
Question 49: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 50: You have a Microsoft 365 E5 subscription. You need to create...
Question 51: Your company uses Azure Security Center and Azure Defender. ...
Question 52: You manage the security posture of an Azure subscription tha...
Question 53: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 54: You have a Microsoft Sentinel workspace named SW1. You need ...
Question 55: You have an Azure subscription that contains an Microsoft Se...
Question 56: You have a Microsoft 365 subscription that uses Microsoft Pu...
Question 57: You have an Azure subscription that contains 100 Linux virtu...
Question 58: You have two Azure subscriptions that use Microsoft Defender...
Question 59: You need to create the analytics rule to meet the Azure Sent...
Question 60: You have an Azure subscription. You need to stream the Micro...
Question 61: You have an Azure subscription. You need to delegate permiss...
Question 62: You have a Microsoft Sentinel workspace that has user and En...
Question 63: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 64: Your company deploys the following services: * Microsoft Def...
Question 65: You have an Azure subscription. You need to delegate permiss...
Question 66: You need to configure DC1 to meet the business requirements....
Question 67: You have an Azure subscription that uses Microsoft Sentinel....
Question 68: You need to build a KQL query in a Microsoft Sentinel worksp...
Question 69: Your company deploys Azure Sentinel. You plan to delegate th...
Question 70: Your company uses line-of-business apps that contain Microso...
Question 71: You have an Azure subscription that contains a resource grou...
Question 72: You have four Azure subscriptions. One of the subscriptions ...
Question 73: You have an existing Azure logic app that is used to block A...
Question 74: You have a Microsoft 365 subscription that uses Microsoft De...
Question 75: You have an Azure subscription that uses Microsoft Sentinel ...
Question 76: You have a suppression rule in Azure Security Center for 10 ...
Question 77: You have an Azure subscription that has Azure Defender enabl...
Question 78: You have a Microsoft 365 subscription that uses Microsoft De...
Question 79: You have a Microsoft 365 subscription that uses Microsoft De...
Question 80: You have an Azure subscription that has Microsoft Defender f...
Question 81: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 82: You have an Azure subscription that uses resource type for C...
Question 83: You have a Microsoft 365 subscription that uses Microsoft 36...
Question 84: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 85: You have an Azure subscription that has Azure Defender enabl...
Question 86: You have a Microsoft Sentinel workspace that contains a cust...
Question 87: You need to use an Azure Sentinel analytics rule to search f...
Question 88: You open the Cloud App Security portal as shown in the follo...
Question 89: You have a Microsoft Sentinel workspace. You plan to visuali...
Question 90: You have a Microsoft 365 subscription that uses Microsoft Pu...
Question 91: You have a Microsoft 365 subscription that uses Microsoft De...
Question 92: You need to implement the Defender for Cloud requirements. W...
Question 93: You need to modify the anomaly detection policy settings to ...
Question 94: You create a custom analytics rule to detect threats in Azur...
Question 95: You have a Microsoft Sentinel workspace named SW1. In SW1. y...
Question 96: Your company has an on-premises network that uses Microsoft ...
Question 97: You need to implement the ASIM query for DNS requests. The s...
Question 98: You have an Azure subscription that uses Microsoft Defender ...
Question 99: You create a new Azure subscription and start collecting log...
Question 100: You are configuring Microsoft Cloud App Security. You have a...
Question 101: You need to ensure that the processing of incidents generate...
Question 102: You have a Microsoft 365 subscription that uses Microsoft De...
Question 103: You have a Microsoft 365 B5 subscription that contains a use...
Question 104: You have a Microsoft 365 subscription that uses Microsoft 36...
Question 105: You have a Microsoft Sentinel workspace. You need to configu...
Question 106: You plan to create a custom Azure Sentinel query that will p...
Question 107: You need to complete the query for failed sign-ins to meet t...
Question 108: You have a Microsoft 365 subscription. The subscription uses...
Question 109: Your company uses Azure Sentinel. A new security analyst rep...
Question 110: A company uses Azure Sentinel. You need to create an automat...
Question 111: You have a Microsoft Sentinel workspace named workspace1 tha...
Question 112: You have an Azure subscription that contains two users named...
Question 113: You have the following SQL query. (Exhibit)...
Question 114: Your on-premises network contains 100 servers that run Windo...
Question 115: You have an Azure Storage account that will be accessed by m...
Question 116: Your company uses Microsoft Defender for Endpoint. The compa...
Question 117: You have an Azure subscription named Sub1 and a Microsoft 36...
Question 118: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 119: You have an Azure Functions app that generates thousands of ...
Question 120: You have an Azure subscription that uses Microsoft Defender ...
Question 121: You have an Azure Sentinel deployment in the East US Azure r...
Question 122: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 123: You have a Microsoft 365 E5 subscription that contains a dev...
Question 124: You have a Microsoft 365 subscription. You have 1,000 Window...
Question 125: You have a Microsoft Sentinel workspace named Workspace1 and...
Question 126: You have a Microsoft 365 subscription that uses Microsoft De...
Question 127: You have a Microsoft 365 E5 subscription that uses Microsoft...
Question 128: You have a Microsoft 365 B5 subscription. You have a PowerSh...
Question 129: You have a Microsoft 365 subscription that contains three us...
Question 130: You have a third-party security information and event manage...
Question 131: You have a Microsoft 365 subscription that uses Microsoft De...
Question 132: You have a Microsoft 365 subscription that uses Microsoft De...
Question 133: You need to implement the Microsoft Sentinel NRT rule for mo...
Question 134: You need to create the test rule to meet the Azure Sentinel ...
Question 135: You have an Azure subscription linked to an Azure Active Dir...
Question 136: Note: This question is part of a series of questions that pr...
Question 137: Your company stores the data for every project in a differen...
Question 138: You use Azure Sentinel. You need to use a built-in role to p...
Question 139: You have an Azure subscription that contains a quest user na...
Question 140: You have an Azure subscription named Sub1 that uses Microsof...
Question 141: You have a Microsoft Sentinel workspace named sws1. You need...
Question 142: You have a Microsoft 365 subscription. You have the followin...
Question 143: You have a Microsoft 365 E5 subscription that contains two u...
Question 144: Your company uses Microsoft Sentinel A new security analyst ...