Microsoft Certified: Security Operations Analyst Associate Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose CD1

  https://learn.microsoft.com/en-us/defender-cloud-apps/azip-integration#how-it-works A - Limits scanning, doesn’t enable full automatic detection B - Just filters — no policy creation or remediation E - File monitoring required but incomplete without AIP integration F - Filtering by file type alone does not detect sensitive files

• Chose CD2

  D. From Settings, select Information Protection, select Azure Information Protection, and then select Automatically scan new files for Azure Information Protection classification labels and content inspection warnings (Correct) This enables Cloud App Security to automatically scan files and detect their classification labels It's a prerequisite for detecting "confidential files" because Cloud App Security needs to identify which files are confidential based on their AIP labels C. Select Investigate files, and then select New policy from search (Correct) After configuring file scanning, you need to create a file policy to generate alerts and trigger remediation actions Creating a policy from the file investigation page allows you to set conditions (e.g., Classification Label = Confidential, External sharing = True)

• Chose DE1

  Settings > Cloud Apps > Connected apps > Information Protection > Microsoft Information Protection settings > Automatically scan new files ...