Exam SC-900 topic 1 question 8 discussion

correct https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources

correct

After you onboard Microsoft Sentinel into your workspace, you can use data connectors to start ingesting your data into Microsoft Sentinel. Microsoft Sentinel comes with many out of the box connectors for Microsoft services, which you can integrate in real time. Microsoft Sentinel data connectors https://learn.microsoft.com/en-us/azure/sentinel/connect-data-sources

Correct Answer: D!

Correct Answer : D

Correct Answer : D https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources

D is correct

Answer is: D "Microsoft Sentinel comes with a number of connectors for Microsoft solutions, available out of the box and providing real-time integration, including Microsoft 365 Defender (formerly Microsoft Threat Protection) solutions, and Microsoft 365 sources, including Office 365, Azure AD, Microsoft Defender for Identity (formerly Azure ATP), and Microsoft Defender for Cloud Apps, and more. " https://docs.microsoft.com/en-us/azure/sentinel/overview

correct

correct

D is the answer - connector

Correct answer

Correct, A connector.

What do you use to provide real-time integration between Azure Sentinel and another security source? The Questions asks what do you use and connect to another security source (SIEM) , The answer is D " Connector " Because connector is used for real-time integration. After onboarding Microsoft Sentinel into your workspace, connect data sources to start ingesting your data into Microsoft Sentinel. Microsoft Sentinel comes with many connectors for Microsoft products, available out of the box and providing real-time integration. You can also enable out-of-the-box connectors to the broader security ecosystem for non-Microsoft products. For example, you can use Syslog, Common Event Format (CEF), or REST APIs to connect your data sources with Microsoft Sentinel. https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources

Correct answer here

D is the right one because to ingest data to a SIEM you will need a connecter that allows you to get the data from a variety of sources.

To on-board Azure Sentinel, you first need to connect to your security sources.