Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
You are an Azure administrator at a content delivery network provider company. The SOC team notified you that they have seen cases where users try to access a highly secure location on the administrative console using a web browser (HTTP). SOC team currently blocks such IP addresses manually based on Microsoft Defender for Cloud alerts. Which tool within Azure Active Directory can you use to create an automation to block such IP address whenever Microsoft Defender for Cloud generates this alert?
A. “Workflow Automation” under “Microsoft Defender for Cloud”
B. Microsoft Sentinel
C. Azure Front Door
D. Azure Monitor
Answer: A
Option A is correct: because Workflow Automation is an automation tool under Security Center on the Azure active directory that lets you create a custom automation workflow to trigger whenever a specific condition or alert occurs and then runs one or more security automation steps as per the workflow.
Option B is incorrect: Microsoft sentinel is incorrect because Microsoft Sentinel is an Azure-based SIEM solution to monitor threat visibility, alert detection, etc.
Option C is incorrect: Azure Front door is not a correct answer because it is a CDN service based on Azure.
Option D is incorrect: Azure Monitor is an incorrect answer because Azure Monitor helps you maximize the availability and performance of your applications and services. It delivers a comprehensive solution for collecting, analyzing, and acting on telemetry from your cloud and on-premises environments. This information helps you understand how your applications are performing and proactively identify issues affecting them and the resources they depend on.
References:
Comments are closed, but trackbacks and pingbacks are open.