Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You use Azure Security Center.You receive a security alert in Security Center.You need to view recommendations to resolve the alert in Security Center.Solution: From Security alerts, you select the alert, select Take Action, and then expand the Prevent future attacks section.Does this meet the goal?
DRAG DROP -You are investigating an incident by using Microsoft 365 Defender.You need to create an advanced hunting query to count failed sign-in authentications on three devices named CFOLaptop, CEOLaptop, and COOLaptop.How should you complete the query? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Select and Place:
HOTSPOT -You need to implement Azure Defender to meet the Azure Defender requirements and the business requirements.What should you include in the solution? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
HOTSPOT -You need to recommend remediation actions for the Azure Defender alerts for Fabrikam.What should you recommend for each threat? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
You need to complete the query for failed sign-ins to meet the technical requirements.Where can you find the column name to complete the where clause?
You have a Microsoft 365 subscription that contains the following resources:• 100 users that are assigned a Microsoft 365 E5 license• 100 Windows 11 devices that are joined to the Microsoft Entra tenantThe users access their Microsoft Exchange Online mailbox by using Outlook on the web.You need to ensure that if a user account is compromised, the Outlook on the web session token can be revoked. What should you configure?
