HOTSPOT - You have an Azure Sentinel workspace that has the following data connectors: - Azure Active Directory Identity Protection - Common Event Format (CEF) ...


Microsoft AZ-500 Exam

Questions Number: 271 out of 443 Questions
61.17%

Question 271
HOTSPOT -
You have an Azure Sentinel workspace that has the following data connectors:
- Azure Active Directory Identity Protection
- Common Event Format (CEF)
Azure Firewall -
You need to ensure that data is being ingested from each connector.
From the Logs query window, which table should you query for each connector? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
AZ-500_271Q.png related to the Microsoft AZ-500 Exam



Reference:
https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-ad-identity-protection
https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-firewall
https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources





Previous Questions Next Questions