SC-200 · Question #23
You provision a Linux virtual machine in a new Azure subscription. You enable Azure Defender and onboard the virtual machine to Azure Defender. You need to verify that an attack on the virtual…
The correct answer is A. cp /bin/echo ./asc_alerttest_662jfi039n D. ./asc_alerttest_662jfi039n testing eicar pipe. Azure Defender for Servers on Linux recognizes the specific filename 'asc_alerttest_662jfi039n' as a synthetic test binary. (A) copies the harmless /bin/echo binary using that exact name, and (D) executes it with the required arguments 'testing eicar pipe'. This sequence…
Question
You provision a Linux virtual machine in a new Azure subscription. You enable Azure Defender and onboard the virtual machine to Azure Defender. You need to verify that an attack on the virtual machine triggers an alert in Azure Defender. Which two Bash commands should you run on the virtual machine?Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Options
- Acp /bin/echo ./asc_alerttest_662jfi039n
- B./alerttest testing eicar pipe
- Ccp /bin/echo ./alerttest
- D./asc_alerttest_662jfi039n testing eicar pipe
How the community answered
(32 responses)- A69% (22)
- B19% (6)
- C13% (4)
Explanation
Azure Defender for Servers on Linux recognizes the specific filename 'asc_alerttest_662jfi039n' as a synthetic test binary. (A) copies the harmless /bin/echo binary using that exact name, and (D) executes it with the required arguments 'testing eicar pipe'. This sequence triggers a test alert in Azure Defender without any real malicious activity. Options B and C use incorrect filenames ('alerttest' instead of 'asc_alerttest_662jfi039n'), so they will not produce a Defender alert.
Topics
Community Discussion
No community discussion yet for this question.