For Linux alert simulation in Defender for Cloud, you first copy /bin/echo to a test file named asc_alerttest_662jfi039n, then execute it with the parameters testing eicar pipe. This sequence generates a benign test alert that validates the Defender for Cloud pipeline. The options using ./alerttest are incorrect file names and won't trigger the simulation.