Free SC-200 Web TestEngine Demo

Exit VCEDump SC-200 Microsoft Security Operations Analyst

Q42 Single choice

You have a third-party security information and event management (SIEM) solution.

You need to ensure that the SIEM solution can generate alerts for Azure Active Directory (Azure AD) sign-events in near real time.

What should you do to route events to the SIEM solution?

A
Create an Azure Sentinel workspace that has a Security Events connector.
B
Configure the Diagnostics settings in Azure AD to stream to an event hub.
C
Create an Azure Sentinel workspace that has an Azure Active Directory connector.
D
Configure the Diagnostics settings in Azure AD to archive to a storage account.

Previous Check answer

Question map42 / 61

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61

Current Correct Answered Incorrectly Reviewed 0 Remaining 61

Marked Questions0

No marked questions.

Answered Incorrectly0

No incorrect answers.

SC-200 Web TestEngine demo