Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam SC-900 All Questions

View all questions & answers for the SC-900 exam

Exam SC-900 topic 1 question 168 discussion

Actual exam question from Microsoft's SC-900
Question #: 168
Topic #: 1
[All SC-900 Questions]

You have an Azure subscription that contains a Log Analytics workspace.

You need to onboard Microsoft Sentinel.

What should you do first?

  • A. Create a hunting query.
  • B. Correlate alerts into incidents.
  • C. Connect to your security sources.
  • D. Create a custom detection rule.
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
bindadarsh7
1 year, 1 month ago
C. Connect to your security sources.
upvoted 1 times
...
Darkfire
1 year, 2 months ago
Selected Answer: C
C is correct https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sources After you onboard Microsoft Sentinel into your workspace, use data connectors to start ingesting your data into Microsoft Sentinel. Microsoft Sentinel comes with many out of the box connectors for Microsoft services, which integrate in real time. For example, the Microsoft 365 Defender connector is a service-to-service connector that integrates data from Office 365, Azure Active Directory (Azure AD), Microsoft Defender for Identity, and Microsoft Defender for Cloud Apps.
upvoted 3 times
...
DanPicardi
1 year, 2 months ago
the answer is correct
upvoted 2 times
...
novak18
1 year, 3 months ago
The given answer is correct The support link below might be the one, not sure Link >> https://learn.microsoft.com/en-us/azure/sentinel/best-practices-workspace-architecture
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...