StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Security operations detection and response

Practice question 111 of 498 · medium

A factory wants OT-specific incidents mapped to ICS techniques. What should it add to alert streaming?

Choose the single best answer.

  1. A.Only application access packages
  2. B.Only enterprise endpoint process rules
  3. C.The Defender for IoT Sentinel solution’s relevant content
  4. D.A policy that treats all OT alerts as benign
Show the answer and explanation

✓ Correct answer

  • The Defender for IoT Sentinel solution’s relevant content

The solution includes OT analytics, workbooks, playbooks, and ICS mappings. Enterprise endpoint rules alone miss OT context, access packages govern access, and blanket benign classification destroys detection value.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.