exam questions

Exam SC-100 All Questions

View all questions & answers for the SC-100 exam

Exam SC-100 topic 2 question 52 discussion

Actual exam question from Microsoft's SC-100
Question #: 52
Topic #: 2
[All SC-100 Questions]

HOTSPOT
-

You have multiple on-premises Hyper-V hosts that contain virtual machines. The virtual machines run Windows Server 2022.

You have an Azure subscription.

You need to recommend a solution to collect Security event logs from the virtual machines by using Microsoft Sentinel. The Solution must meet the following requirements:

• Leverage the Windows Security Events via AMA data connector.
• Ensure that only specific events are collected.
• Minimize costs.

What should you recommend? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one port.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
424ede1
1 month ago
Data Collection Rule Log Analytics agent (Now Azure Monitor agent) https://learn.microsoft.com/en-us/azure/sentinel/connect-services-windows-based
upvoted 1 times
...
424ede1
1 month ago
Correct! https://learn.microsoft.com/en-us/azure/sentinel/connect-services-windows-based
upvoted 1 times
...
reyreyg
2 months, 3 weeks ago
1. DCR 2. Azure arc now *Log analytics agent is depreciated *
upvoted 2 times
...
676ae1a
2 months, 3 weeks ago
1.DCR 2.Log analytics agent
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago