You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint You need to create a query that will link the Alertlnfo, AlertEvidence, and DeviceLogonEvents tables. The solution must return all the rows in the tables.
Which operator should you use?

• A.join kind = inner
• B.union kind = inner
• C.search *
• D.evaluate hint. Remote =

Comment: *

Name: *

Email: *

Verification: *

You have an Azure subscription that uses Microsoft Sentinel.
You detect a new threat by using a hunting query.
You need to ensure that Microsoft Sentinel automatically detects the threat. The solution must minimize administrative effort.
What should you do?

• A.Create a playbook.
• B.Create a watchlist.
• C.Create an analytics rule.
• D.Add the query to a workbook.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Storage account that will be accessed by multiple Azure Function apps during the development of an application.
You need to hide Azure Defender alerts for the storage account.
Which entity type and field should you use in a suppression rule? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://techcommunity.microsoft.com/t5/azure-security-center/suppression-rules-for-azure-security-center-alerts-are-now/ba-p/1404920

Comment: *

Name: *

Email: *

Verification: *

You need to configure the Azure Sentinel integration to meet the Azure Sentinel requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/cloud-app-security/siem-sentinel

Comment: *

Name: *

Email: *

Verification: *

You have the following SQL query.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *