HOTSPOT - You need to configure the Azure Sentinel integration to meet the Azure Sentinel requirements. What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area:
Correct answer.
To connect Defender for Cloud Apps (MCAS) to Microsoft Sentinel:
1- from Defender for Cloud Apps --> Security extensions --> Add SIEM agents tab --> then click "Add SIEM agent" and select Mircosoft Sentinel
2- From Sentinel --> Data connectors --> Select "Microsoft Defender for Cloud Apps" --> and make sure it is connectted.
Ref:
https://docs.microsoft.com/en-us/defender-cloud-apps/siem-sentinel
https://docs.microsoft.com/en-us/azure/sentinel/data-connectors-reference#microsoft-defender-for-cloud-apps
https://techcommunity.microsoft.com/t5/microsoft-sentinel-blog/microsoft-cloud-app-security-mcas-activity-log-in-azure-sentinel/ba-p/1849806
Out of date. The MDCA portal for new tenants has now been integrated with defender. So you add a SIEM now by going to defender>settings>cloud apps>System>SiemAgents>add siem agent
This section is not available anymore. Please use the main Exam Page.SC-200 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Lion007
Highly Voted 2 years, 4 months agoAnil0512
1 year, 1 month agodanb67
Highly Voted 1 year agoRamye
7 months, 4 weeks agochepeerick
Most Recent 1 year ago