SC-900 Security Operations & Threat Protection 2

Question 1

Which Microsoft Sentinel feature automatically groups related alerts into a single actionable item to reduce alert fatigue?

Accepted Answer

Incidents

Answer

Microsoft Sentinel groups related alerts into incidents, giving analysts a single consolidated item to investigate instead of many separate alerts.

Question 2

What does Microsoft Defender for Cloud use to provide a prioritized list of security recommendations?

Accepted Answer

Secure Score

Answer

Secure Score in Microsoft Defender for Cloud quantifies your security posture and provides prioritized recommendations to improve it.

Question 3

Which capability in Microsoft 365 Defender allows analysts to proactively search for threats using custom queries?

Accepted Answer

Advanced Hunting

Answer

Advanced Hunting lets security analysts write Kusto Query Language (KQL) queries to proactively search across Microsoft 365 data for threats.

Question 4

A company wants to simulate phishing attacks against its employees to improve security awareness. Which Microsoft tool should they use?

Accepted Answer

Attack Simulation Training

Answer

Attack Simulation Training in Microsoft 365 Defender lets organizations run simulated phishing and other attack scenarios to train employees.

Question 5

What is the primary function of Microsoft Defender for Office 365's Safe Attachments feature?

Accepted Answer

Detonates attachments in a sandbox to detect malware

Answer

Safe Attachments opens email attachments in a virtual sandbox environment to detect malicious behavior before delivering them to users.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test