Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
100%Set the LA1 trigger to: When a Defender for Cloud Recommendation is created or triggered By triggering LA1 based on recommendations, you can proactively address potential security issues before they escalate into actual alerts. Trigger the execution of LA1 from: Recommendations You can manually trigger LA1 from the Recommendations section in Defender for Cloud to test its remediation capabilities. Remember to configure LA1 to take appropriate actions based on the specific recommendations, such as applying security patches, hardening configurations, or disabling vulnerable services.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think think the second part is literally asking what screen you'd trigger from to test. "You can also run logic apps manually when viewing any security alert or recommendation." https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation
The answers are: Set Trigger to when a defender for Cloud recommendation is created or triggered Trigger the execution of LA1 from Recommendations. If you set the trigger of a logic app of a particular type, then you can only trigger it from that type. For e.g. if the trigger is alert , then you can tigger the logic app from a alert & if the trigger is recommendation, then you can trigger it from a recommendation. https://learn.microsoft.com/en-us/azure/defender-for-cloud/review-security-recommendations#explore-a-recommendation
100%Set the LA1 trigger to: When a Defender for Cloud Recommendation is created or triggered By triggering LA1 based on recommendations, you can proactively address potential security issues before they escalate into actual alerts. Trigger the execution of LA1 from: Recommendations You can manually trigger LA1 from the Recommendations section in Defender for Cloud to test its remediation capabilities. Remember to configure LA1 to take appropriate actions based on the specific recommendations, such as applying security patches, hardening configurations, or disabling vulnerable services.