ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-101 All Questions

View all questions & answers for the MS-101 exam
Go to Exam

Exam MS-101 topic 11 question 5 discussion

Actual exam question from Microsoft's MS-101
Question #: 5
Topic #: 11
[All MS-101 Questions]

HOTSPOT -
You need to meet the technical requirement for log analysis.
What is the minimum number of data sources and log collectors you should create from Microsoft Defender for Cloud Apps? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
References:
https://docs.microsoft.com/en-us/cloud-app-security/discovery-docker
by Davidchercm at May 14, 2022, 11:38 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ServerBrain
2 years, 4 months ago
Correct, 3 and 1, 3 as SIEM appliances come from three different vendors..
upvoted 3 times
...
Contactfornitish
2 years, 8 months ago
Six locations but 3 different vendors, so 3 different connectors. Log collectors can be 6 but it talks about minimum so 1 is bare minimum. Slow and inefficient but works at minimum
upvoted 2 times
...
RazielLycas
2 years, 8 months ago
why 3 source?
upvoted 1 times
Arlecchino
2 years, 7 months ago
Quoting user 'Contactfornitish' as "Six locations but 3 different vendors, so 3 different connectors. Log collectors can be 6 but it talks about minimum so 1 is bare minimum. Slow and inefficient but works at minimum"
upvoted 1 times
...
...
Davidchercm
2 years, 11 months ago
log collector just need 1 ?
upvoted 1 times
Koetjeboe
2 years, 11 months ago
You can centrally set this up using the docker image. It will retrieve data for all locations.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago