Configure Users for Email Notifications | Azure Security Center

A

The correct answer is D. From Security Center, modify the alert rule.

Explanation: Azure Security Center allows you to create custom alert rules to monitor and alert you on specific security-related events. When an alert is triggered, you can configure who should receive an email message with the alert details.

To configure the users who will receive an email message when the alert is triggered, you should follow these steps:

1. Open the Azure Security Center dashboard and select the "Alerts" blade.
2. Click on the "Custom alerts" tab.
3. Select the custom alert rule that you want to modify and click on the "Edit" button.
4. In the "Notifications" section, configure the email recipients. You can add individual email addresses or specify an action group that contains the email addresses of the recipients.
5. Click on the "Save" button to apply the changes.

Option A, "From Azure Monitor, create an action group", is incorrect. While Azure Monitor allows you to create action groups to send notifications when specific events occur, it is not the correct tool for configuring email recipients for Azure Security Center alerts.

Option B, "From Security Center, modify the Security policy settings of the Azure subscription", is incorrect. Security policies in Azure Security Center are used to enforce compliance with specific security requirements, such as requiring virtual machines to have endpoint protection installed. They are not used to configure email recipients for alerts.

Option C, "From Azure Active Directory (Azure AD), modify the members of the Security Reader role group", is incorrect. The Security Reader role group in Azure AD allows users to view security-related information, such as Azure Security Center recommendations and alerts, but it does not provide a way to configure email recipients for alerts.