Q22
Hotspot
HOTSPOT
You have four Azure subscriptions: Sub1, Sub2, Sub3, and Sub4. Each subscription is linked to a unique Microsoft Entra tenant and a Microsoft 365 subscription. Sub1 contains a user named User1.
You plan to implement Microsoft Sentinel and need to ensure that User1 can monitor Microsoft Entra ID events and Microsoft 365 events for Sub2, Sub3, and Sub4 using Microsoft Sentinel. The solution must minimize administrative effort.
What is the minimum number of Microsoft Sentinel workspaces you should create, and which Azure service should you use?
To answer, select the appropriate options in the answer area.
Select the correct area(s) on the image.