Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Defender for Cloud uses severity levels to prioritize alerts: High: Confirmed threats or active attacks Medium: Suspicious behavior or potential threats Low/Informational: Unusual but not necessarily malicious
The question is not asking what alert level will be default be assigned for each event, they are all medium. The question is what should I set as the severity. When I look at the 3 medium level security flags against something I would say the combined weight of those alerts would justify a high severity.
No, the question is essentially asking what severity level filter should you apply that would return those 3 events.. correct answer is medium