Microsoft Azure Security Engineer Associate AZ-500 Practice Question

Microsoft Defender for Cloud lets you create alert suppression rules that automatically dismiss specific alert types when they match defined conditions, such as particular source IP addresses. By creating a suppression rule scoped to the "Brute force attack against an Azure virtual machine" alert and listing the penetration-testing IP range as the matching entity, the alert will be silently dismissed only for that traffic. Disabling recommendations, excluding the VMs from secure score, or crafting separate Azure Monitor alert rules do not prevent Defender for Cloud from producing the original security alert for other sources.