Câu 139: SC-200: Microsoft Security Operations Analyst

You have a Microsoft Sentinel workspace. You receive multiple alerts for failed sign-in attempts to an account. You identify that the alerts are false positives. You need to prevent additional failed sign-in alerts from being generated for the account. The solution must meet the following requirements:• Ensure that failed sign-in alerts are generated for other accounts.• Minimize administrative effortWhat should do?

1. A. Modify the analytics rule. — đáp án hiện tại
2. B. Create a watchlist.
3. C. Add an activity template to the entity behavior.
4. D. Create an automation rule.