Exam AZ-500 topic 4 question 38 discussion

Wrong Correct Answers is D and E You need to upgrade the pricing tier of Azure Security Center to standard. You can also create a new Log Analytics workspace which can be used by Azure Security Center to send data with regards to your Azure resources

Quick note. What was STANDARD before is called DEFENDER now. Either one is the non-FREE tier. Microsoft page says - Security alerts are triggered by advanced detections and are available only with Azure Defender tier. So E is correct. You can view the alerts in the ASC portal page and you can also send them to Azure Log Analytics Workspace (or Azure Event Hubs) using the 'continuous export' feature. So that would be D. Therefore D&E are correct.

D & E Explanation: You need to upgrade the pricing tier of Azure Security Center to standard. You can also create a new Log Analytics workspace which can be used by Azure Security Center to send data with regards to your Azure resources

D. Create an Azure Log Analytics workspace. E. Upgrade the pricing tier of Security Center to Standard.

D. Create an Azure Log Analytics workspace. E. Upgrade the pricing tier of Security Center to Standard. Outdated answers

Custom alert rules require the use of Azure Monitor or Workflow Automation. The answer D and E

Outdated question as this terminology no longer exists with "defender for cloud"

correct answer D and E

You need to upgrade the tier for sure and in order to save them you need log analytics so D and E

Azure Security Center uses Microsoft Defender for Cloud to manage security across Azure. The Microsoft Defender for Cloud "free tier" includes continuous assessment, security recommendations, as well as Secure Score for Azure and AWS environments. To create "custom alert rules you must use enhanced security which is only available through the paid "standard tier". Data is collected using the Log Analytics agent, which reads various security-related configurations and event logs from the machine and copies the data to your Log Analytics Workspace for analysis. Custom alert rules require the use of Azure Monitor or Workflow Automation. Since these aren't listed the only two that apply are D,E. Answer = D. Create an Azure Log Analytics workspace. Most Voted Answer = E. Upgrade the pricing tier of Security Center to Standard. Most Voted " https://docs.microsoft.com/en-us/azure/defender-for-cloud/configure-email-notifications https://docs.microsoft.com/en-us/azure/defender-for-cloud/managing-and-responding-alerts https://docs.microsoft.com/en-us/azure/azure-monitor/alerts/alerts-log

correct

D and E are correct answers.

no need to an extra storage account

need storage

Correct

Answer is D and E. You need to upgrade the pricing tier of Azure Security Center to standard. You can also create a new Log Analytics workspace which can be used by Azure Security Center to send data with regards to your Azure resources.

tested. no extra storage account is needed. D and E are correct.