SC-200 Certification Practice Question #60

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You use Azure Security Center.
You receive a security alert in Security Center.
You need to view recommendations to resolve the alert in Security Center.
Solution: From Security alerts, you select the alert, select Take Action, and then expand the Mitigate the threat section.
Does this meet the goal?

Accepted Answer

The proposed solution exactly matches the MS Learn-documented procedure: go to **Security alerts**, select the alert, open **Take action**, and review the **Mitigate the threat** section, which "provides manual remediation steps for this security alert." Because the question's goal is to view recommendations to **resolve** the alert, the Mitigate-the-threat remediation steps satisfy it, so the answer is Yes. The Suggested Answer (A) and a strong Most Voted (A, 11 votes) align with the docs, and the originally-confused ggGG1357 ultimately settled on "A is correct, 100% sure." Confidence is held at 84% rather than higher because of a reasoned minority (ExamSC200 👍 3) arguing that "Prevent future attacks" is the section that lists *recommendations* while "Mitigate the threat" lists *remediation/containment* steps — a defensible reading of the wording. On balance, MS Learn's description of "Mitigate the threat" as the section with the steps to resolve the alert, plus the 11-vote majority, makes A the better answer.

More SC-200 practice questions