fix for acrolinx

Author: ceperezb

learn-pr/wwl-sci/design-solutions-security-operations/9-knowledge-check.yml

@@ -3,7 +3,7 @@ uid: learn.wwl.design-solutions-security-operations.knowledge-check
 title: Module assessment
 metadata:
   title: Module assessment
-  description: "Knowledge check for module on the topic: design solutions for security operations."
+  description: "Knowledge check for module on the article: design solutions for security operations."
   ms.date: 03/06/2026
   author: ceperezb
   ms.author: ceperezb
@@ -29,18 +29,18 @@ quiz:
   questions:
     - content: "What is the function of a Security Operations Center (SOC)?"
       choices:
-        - content: "Monitor an organization's security posture, detect and respond to security incidents."
+        - content: "Monitor an organization's security posture, detect, and respond to security incidents."
           isCorrect: true
           explanation: "A SOC is responsible for monitoring an organization's security posture, detecting security incidents, and responding effectively to them."
         - content: "Perform security testing and vulnerability assessments"
           isCorrect: false
-          explanation: "While security testing is important, a SOC is primarily focused on incident detection, response and prevention."
+          explanation: "While security testing is important, a SOC is primarily focused on incident detection, response, and prevention."
         - content: "Develop network security policies and procedures"
           isCorrect: false
-          explanation: "While policy development is an important part of any security program, a SOC is primarily focused on incident detection, response and prevention."
+          explanation: "While policy development is an important part of any security program, a SOC is primarily focused on incident detection, response, and prevention."
         - content: "Train employees on security awareness best practices"
           isCorrect: false
-          explanation: "While employee training is important, a SOC is primarily focused on incident detection, response and prevention."
+          explanation: "While employee training is important, a SOC is primarily focused on incident detection, response, and prevention."
 
     - content: "Which of the following best describes the function of Azure Monitor?"
       choices:
@@ -61,22 +61,22 @@ quiz:
       choices:
         - content: "An AI-powered malware scanner that detects and removes malicious files."
           isCorrect: false
-          explanation: "While malware detection is part of its capabilities, XDR refers to extended detection and response which is designed to connect multiple security products across an environment and automate threat response in real-time."
+          explanation: "While malware detection is part of its capabilities, XDR refers to extended detection and response, which is designed to connect multiple security products across an environment and automate threat response in real-time."
         - content: "A cloud-based backup solution for critical data." 
           isCorrect: false
           explanation: "Backup solutions are important but the role of XDR is beyond that, focusing on detecting and responding to modern-day cyber-attacks with automated actions."
         - content: "A tool that automates patching of vulnerable systems."
           isCorrect: false
-          explanation: "While automated patching is a valuable tool for improving system security, this is not the primary function of XDR."
+          explanation: "While automated patching is a valuable tool for improving system security, this isn't the primary function of XDR."
         - content: "A unified threat detection and response solution."
           isCorrect: true
-          explanation: "XDR is a unified platform that provides visibility across endpoints, email, documents, identity, and allows security teams to quickly investigate, respond and remediate threats in a coordinated way."
+          explanation: "XDR is a unified platform that provides visibility across endpoints, email, documents, identity, and allows security teams to quickly investigate, respond, and remediate threats in a coordinated way."
 
     - content: "What is the purpose of the MITRE ATT&CK framework within Microsoft Sentinel?"
       choices:
         - content: "To identify vulnerabilities in Azure environments."
           isCorrect: false
-          explanation: "The MITRE ATT&CK framework is used to identify tactics, techniques, and procedures (TTPs) used by attackers to compromise networks and systems. It is not specifically intended for identifying vulnerabilities."
+          explanation: "The MITRE ATT&CK framework is used to identify tactics, techniques, and procedures (TTPs) used by attackers to compromise networks and systems. It is not intended for identifying vulnerabilities."
         - content: "To create custom dashboards for tracking security events."
           isCorrect: false
           explanation: "Dashboards are a visualization tool, while MITRE ATT&CK can be used to help organize, prioritize and track against potential threat actor activity mapped against the TTPs."