Knowledge check

Completed

Choose the best response for each of the questions below.

Check your knowledge

1.

What are the steps required to onboard organizations and users to Microsoft Security Copilot?

Enable Copilot plugins, and procure Microsoft Entra Premium 1 licensing.

Procure Microsoft Entra Premium 1 licensing.

Provision SCUs, set up the default environment, and assign role permission.

2.

A security analyst is crafting a prompt to investigate an incident involving the Pearl Sleet actor. Which prompt will likely yield the most comprehensive results?

Can you give me information about Pearl Sleet activity, including a list of known indicators of compromise and tools, tactics, and procedures (TTPs)?

Describe Pearl Sleet.

List Pearl Sleet activities.

3.

An admin is tasked with setting up Microsoft Security Copilot and needs to provision capacity. After reviewing the options, which method should the admin choose to provision capacity for their organization?

Provision capacity through a third-party vendor

Provision capacity within Security Copilot

Provision capacity by directly purchasing SCUs from a software retailer

You must answer all questions before checking your work.