Exam SC-200 Topic 1 Question 298 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 298
Topic #: 1
You recently deployed Azure Sentinel.
You discover that the default Fusion rule does not generate any alerts. You verify that the rule is enabled.
You need to ensure that the Fusion rule can generate alerts.
What should you do?

Suggested Answer: B Vote an answer

The built-in Fusion correlation rule in Microsoft Sentinel generates incidents only when it has sufficient telemetry from connected sources (e.g., Microsoft 365 Defender products, Azure AD sign-in logs, Cloud App, etc.). If no relevant data connectors are connected or sending data, Fusion will remain silent even if the rule is enabled. Connecting and authorizing the required data connectors provides the multi-signal input Fusion needs to produce incidents.

by Moses at Jul 07, 2026, 12:47 PM

Limited Time Offer

15%

Off

Get Premium SC-200 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10