nerdexam
Microsoft

SC-200 · Question #20

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might…

The correct answer is B. No. The 'Prevent future attacks' section in the Take Action pane contains hardening recommendations to stop similar attacks from occurring later – it is forward-looking, not remediation for the current alert. To view recommendations that resolve an active alert, you should expand…

Submitted by mateo_ar· Apr 18, 2026Manage threat mitigation using Microsoft Defender for Cloud

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You use Azure Security Center. You receive a security alert in Security Center. You need to view recommendations to resolve the alert in Security Center. Solution: From Security alerts, you select the alert, select Take Action, and then expand the Prevent future attacks section. Does this meet the goal?

Options

  • AYes
  • BNo

How the community answered

(25 responses)
  • A
    20% (5)
  • B
    80% (20)

Explanation

The 'Prevent future attacks' section in the Take Action pane contains hardening recommendations to stop similar attacks from occurring later – it is forward-looking, not remediation for the current alert. To view recommendations that resolve an active alert, you should expand the 'Mitigate the threat' section instead. Because the solution points to the wrong section, it does not meet the goal.

Topics

#Microsoft Defender for Cloud#Security alerts#Remediation recommendations#Incident response workflow

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice