Exam MS-102 topic 1 question 305 discussion

The Answer is correct: B and E The two components are Data sources and Log collectors. Under Log collectors you configure: Name Host IP address or FQDN Data source(s)

BE is correct. https://learn.microsoft.com/en-us/defender-cloud-apps/discovery-docker-windows

The correct answers are: B. the data source E. the host IP address or FQDN Explanation: To configure automatic log upload for syslog data from a supported firewall device to Microsoft Defender for Cloud Apps, you need to set up a log collector. The key components required for this configuration are: The data source: You need to specify the data source as the source from which logs are being collected. This would typically be the syslog server or the firewall device that is sending logs to Microsoft Defender for Cloud Apps. The host IP address or FQDN: This is the IP address or Fully Qualified Domain Name (FQDN) of the log collector or the syslog server. It’s necessary for Defender for Cloud Apps to know where to receive the logs from.

The answer is B and E

https://learn.microsoft.com/en-us/defender-cloud-apps/discovery-docker-windows 1.In the Microsoft Defender portal, select Settings > Cloud Apps > Cloud Discovery > Automatic log upload > Data sources tab. 2e. Set the Receiver type to either FTP, FTPS, Syslog – UDP, or Syslog – TCP, or Syslog – TLS. Extra: Supported Firewalls and proxies: https://learn.microsoft.com/en-us/defender-cloud-apps/set-up-cloud-discovery At the bottom: Configure automatic log upload for continuous reports -> https://learn.microsoft.com/en-us/defender-cloud-apps/discovery-docker (Docker in Onpremise Windows, Podman, Docker in Azure or Docker in Azure Kubernetes)

You have a Microsoft 365 E5 subscription. You plan to ingest syslog data from a supported firewall device to Microsoft Defender for Cloud Apps. You need to configure automatic log upload. Which two components should you configure for the log collector? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. A. the receiver type B. the data source C. the username and password D. a connection string E. the host IP address or FQDN To set up automatic log upload for the log collector, you should configure: A. the receiver type B. the data source These configurations will enable the log collector to properly handle the syslog data from your firewall device

A. the receiver type – You need to specify the type of log receiver (such as syslog) that will be used to collect the logs from the firewall device. B. the data source – This refers to the firewall or other network device that is providing the syslog data, and it needs to be properly configured to send the logs to the log collector.