SC-200 Exam Dumps | You have a Microsoft Sentinel workspace. You enable User and Entity Behavior Analytics (UFBA) by using

<< Prev Question Next Question >>

Question 149/186

You have a Microsoft Sentinel workspace.
You enable User and Entity Behavior Analytics (UFBA) by using Audit logs and Signin logs. The following entities are detected in the Azure AD tenant:
* App name: App1
* IP address: 192.168.1.2
* Computer name: Device1
* Used client app: Microsoft Edge
* Email address: [email protected]
* Sign-in URL: https://www.company.com
Which entities can be investigated by using UEBA?

A. app name, computer name, IP address, email address, and used client app only

B. IP address and email address only

C. used client app and app name only

D. IP address only

Question List (186q): Question 1: You plan to review Microsoft Defender for Cloud alerts by us...; Question 2: You have a Microsoft Sentinel workspace. You have a query na...; Question 3: You have a Microsoft 365 subscription that uses Microsoft Co...; Question 4: You have four Azure subscriptions. One of the subscriptions ...; Question 5: You provision a Linux virtual machine in a new Azure subscri...; Question 6: Note: This question is part of a series of questions that pr...; Question 7: You have 100 Azure subscriptions that have enhanced security...; Question 8: You have an Azure subscription that contains a Log Analytics...; Question 9: You have a Microsoft 365 subscription that uses Microsoft De...; Question 10: You have an Azure subscription that contains a Microsoft Sen...; Question 11: You need to implement Azure Defender to meet the Azure Defen...; Question 12: You have a Microsoft 365 E5 subscription that contains a dat...; Question 13: You have an Microsoft Sentinel workspace named SW1. You plan...; Question 14: You have an Azure subscription that contains an Microsoft Se...; Question 15: You need to restrict cloud apps running on CLIENT1 to meet t...; Question 16: You have the following environment: * Azure Sentinel * A Mic...; Question 17: You have a Microsoft Sentinel workspace that contains a cust...; Question 18: You have a Microsoft Sentinel workspace. You need to create ...; Question 19: You have a Microsoft 365 subscription that contains 1,000 Wi...; Question 20: Your company has an on-premises network that uses Microsoft ...; Question 21: You need to configure the Azure Sentinel integration to meet...; Question 22: You have a Microsoft Sentinel workspace that uses the Micros...; Question 23: Note: This question is part of a series of questions that pr...; Question 24: You have a Microsoft 365 subscription that uses Microsoft De...; Question 25: You have a Microsoft 365 E5 subscription that contains two u...; Question 26: You have an Azure subscription that contains two users named...; Question 27: You open the Cloud App Security portal as shown in the follo...; Question 28: You have an Azure subscription that has the enhanced securit...; Question 29: You are investigating an incident by using Microsoft 365 Def...; Question 30: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 31: You have an Azure subscription. You need to delegate permiss...; Question 32: You are investigating an incident in Azure Sentinel that con...; Question 33: You have an Azure Storage account that will be accessed by m...; Question 34: You have an Azure subscription that contains the users shown...; Question 35: You need to ensure that the processing of incidents generate...; Question 36: You have an Azure subscription that contains the users shown...; Question 37: You purchase a Microsoft 365 subscription. You plan to confi...; Question 38: You have an Azure Sentinel deployment. You need to quer y fo...; Question 39: You manage the security posture of an Azure subscription tha...; Question 40: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 41: You have a Microsoft 365 E5 subscription that is linked to a...; Question 42: Note: This question is part of a series of questions that pr...; Question 43: A company wants to analyze by using Microsoft 365 Apps. You ...; Question 44: You have an Azure subscription that uses Microsoft Sentinel....; Question 45: You have an Azure subscription that contains a guest user na...; Question 46: You have a Microsoft 365 subscription that uses Microsoft De...; Question 47: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 48: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 49: In sub1, you create a Log Analytics workspace named workspac...; Question 50: You have a Microsoft Sentinel workspace that contains the fo...; Question 51: You have an Azure subscription that uses Microsoft Defender ...; Question 52: You have a Microsoft Sentinel workspace named workspace1 and...; Question 53: You use Azure Security Center. You receive a security alert ...; Question 54: You have a Microsoft 365 E5 subscription that contains a dev...; Question 55: You have a Microsoft Sentinel workspace that contains the fo...; Question 56: You have an Azure Functions app that generates thousands of ...; Question 57: No te: This question is part of a series of questions that p...; Question 58: You have a Microsoft Sentinel workspace that has User and En...; Question 59: Your company stores the data of every project in a different...; Question 60: You have a Microsoft 365 E5 subscription that contains the h...; Question 61: You have 50 Microsoft Sentinel workspaces. You need to view ...; Question 62: You create a new Azure subscription and start collecting log...; Question 63: You need to add notes to the events to meet the Azure Sentin...; Question 64: You have an on-premises network. You have a Microsoft 365 E5...; Question 65: You have an Azure subscription that contains a user named Us...; Question 66: You have a Microsoft Sentinel workspace named SW1. In SW1, y...; Question 67: You need to implement the query for Workbook1 and Webapp1. T...; Question 68: You create a new Azure subscription and start collecting log...; Question 69: You are configuring Azure Sentinel. You need to send a Micro...; Question 70: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 71: You need to visualize Azure Sentinel data and enrich the dat...; Question 72: You have a Microsoft 365 subscription that uses Microsoft De...; Question 73: You have a Microsoft 365 subscription that uses Microsoft De...; Question 74: You have an Azure subscription. You need to stream the Micro...; Question 75: You have a Microsoft Sentinel workspace that has a default d...; Question 76: You have a Microsoft 365 subscription that uses Azure Defend...; Question 77: You have an Azure subscription that is linked to a hybrid Az...; Question 78: You have an Azure subscription that uses Microsoft Defender ...; Question 79: You have a Microsoft Sentinel workspace named Workspace1. Yo...; Question 80: You have a Microsoft 365 subscription that contains three us...; Question 81: You are configurin g Microsoft Cloud App Security. You have ...; Question 82: You need to configure Microsoft Cloud App Security to g ener...; Question 83: You have the Azure subscriptions shown in the following tabl...; Question 84: You need to recommend a solution to meet the technical requi...; Question 85: Your on-premises network contains 100 servers that run Windo...; Question 86: You have a Microsoft 365 subscription that uses Microsoft De...; Question 87: You have a playbook in Azure Sentinel. When you trigger the ...; Question 88: You create an Azure subscription. You enable Microsoft Defen...; Question 89: You are informed of an increase in malicious email being rec...; Question 90: You have an Azure subscription that uses resource type for C...; Question 91: You need to implement the Defender for Cloud requirements. W...; Question 92: You have an Azure subscription that contains a Microsoft Sen...; Question 93: Note: This question is part of a series of questions that pr...; Question 94: You need to implement the Microsoft Sentinel NRT rule for mo...; Question 95: Your on-premises network contains a Hyper-V cluster. The clu...; Question 96: You have a Microsoft 365 tenant that uses Microsoft Exchange...; Question 97: You have an Azure subscription named Sub1 that contains a Mi...; Question 98: You have an Azure subscription that has Microsoft Defender f...; Question 99: You have a Microsoft 365 B5 subscription that contains a use...; Question 100: You have the following SQL query. (Exhibit)...; Question 101: Your company deploys the following services: * Microsoft Def...; Question 102: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 103: You have a Microsoft 365 E5 subscription that contains two u...; Question 104: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 105: You need to implement Microsoft Defender for Cloud to meet t...; Question 106: You have a Microsoft 365 subscription that uses Microsoft De...; Question 107: You need to meet the Microsoft Sentinel requirements for App...; Question 108: You use Azure Sentinel. You need to receive an immediate ale...; Question 109: You have an existing Azure logic app that is used to block A...; Question 110: You have a Microsoft 365 E5 subscription and a Microsoft Sen...; Question 111: You have an Azure subscription named Sub1 that uses Microsof...; Question 112: You need to identify which mean time metrics to use to meet ...; Question 113: You need to restrict cloud apps running on CUENT1 to meet th...; Question 114: You have a Microsoft 365 E5 subscription that contains 200 W...; Question 115: You have the resources shown in the following table. (Exhibi...; Question 116: You have an Azure subscription that contains a Microsoft Sen...; Question 117: You have an Azure subscription that uses Microsoft Sentinel ...; Question 118: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 119: You have a Microsoft 365 subscription that uses Microsoft Pu...; Question 120: You have 500 on-premises Windows 11 devices that use Microso...; Question 121: You have an Azure subscription that uses Microsoft Defender ...; Question 122: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 123: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 124: You need to ensure that you can run hunting queries to meet ...; Question 125: You have a Microsoft Sentinel workspace. A Microsoft Sentine...; Question 126: You have an Azure subscription that contains the following r...; Question 127: You implement Safe Attachments policies in Microsoft Defende...; Question 128: You have 500 on-premises devices. You have a Microsoft 365 E...; Question 129: You have a Microsoft 365 E5 subscription that contains 100 L...; Question 130: You need to implement Microsoft Sentinel queries for Contoso...; Question 131: You have an on-premises datacenter that contains a custom we...; Question 132: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 133: You need to create a query to investigate DNS-related activi...; Question 134: You have a Microsoft Sentinel workspace named Workspacel tha...; Question 135: You need to remediate ac tive attacks to meet the technical ...; Question 136: You have a Microsoft Sentinel workspace named sws1. You plan...; Question 137: You have a Microsoft 365 E5 subscription that contains Windo...; Question 138: You have a Microsoft 365 subscription that uses Microsoft De...; Question 139: You have a Microsoft 365 subscription that uses Microsoft De...; Question 140: You need to implement Azure Sentinel queries for Contoso and...; Question 141: You have a Microsoft Sentinel workspace named sws1. You n ee...; Question 142: You have a custom analytics rule to detect threats in Azure ...; Question 143: You have an Azure subscription that uses Microsoft Defender ...; Question 144: You have an Azure subscription linked to an Azure Active Dir...; Question 145: You have an Azure subscription that has Azure Defender enabl...; Question 146: You have a Microsoft Sentinel workspace that contains an Azu...; Question 147: Note: This question is part of a series of questions that pr...; Question 148: You have an Azure subscription that contains a user named Us...; Question 149: You have a Microsoft Sentinel workspace. You enable User and...; Question 150: You have a Microsoft 365 E5 subscription that uses Microsoft...; Question 151: You have a Microsoft 365 E5 subscription. You need to search...; Question 152: You have an Azure subscription that contains a Microsoft Sen...; Question 153: You have a Microsoft 365 subscription. The subscription cont...; Question 154: Note: This question is part of a series of questions that pr...; Question 155: You have a Microsoft Sentinel workspace. You need to prevent...; Question 156: You need to update the threat intelligence list to include t...; Question 157: You have an Azure subscription that contains an Microsoft Se...; Question 158: You have a Microsoft 365 subscription. You have 1,000 Window...; Question 159: You have an Azure subscription that uses Microsoft Sentinel ...; Question 160: You need to modify the anomaly detection policy settings to ...; Question 161: Your company has a single office in Istanbul and a Microsoft...; Question 162: You have a Microsoft 365 subscription that uses Microsoft 36...; Question 163: You have an on-premises Windows 11 Pro device named Device1 ...; Question 164: You have an on-premises virtual machine named VM1 that runs ...; Question 165: You have a Microsoft 365 subscription that uses Microsoft De...; Question 166: You have a Microsoft 365 subscription You need to identify a...; Question 167: You have an Azure subscription that uses Microsoft Defender ...; Question 168: You have an Azure subscription that contains a user named Us...; Question 169: You need to create the analytics rule to meet the Azure Sent...; Question 170: You have a Microsoft 365 E5 subscription that contains a dev...; Question 171: You have a Microsoft Sentinel workspace. You need to configu...; Question 172: You have a Microsoft Sentine1 workspace that contains a cust...; Question 173: You have a Microsoft Sentinel workspace named SW1. In SW1. y...; Question 174: You have a Microsoft 365 subscription that contains the foll...; Question 175: Your on-premises network contains an Active Directory Domain...; Question 176: You need to create an advanced hunting query to i nvestigate...; Question 177: You have an Azure subscrip tion that has Azure Defender enab...; Question 178: You have an Azure subscription that uses Microsoft Defender ...; Question 179: You provision Azure Sentinel for a new Azure subscription. Y...; Question 180: You need to use an Azure Sentinel analytics rule to search f...; Question 181: You have a Microsoft 365 subscription that uses Microsoft De...; Question 182: You have an Azure subscription that uses Microsoft Defender ...; Question 183: You need to configure DC1 to meet the business requirements....; Question 184: Your company uses Azure Sentinel. A new security analyst rep...; Question 185: You have a Microsoft Sentinel workspace named Workspaces You...; Question 186: You have an Azure subscription. The subscription contains 10...

Question 149/186

LEAVE A REPLY

Download PDF File