Microsoft Azure Fundamentals AZ-900 — Topic 1 Question 256

Question

You need to collect and automatically analyze security events from Azure Active Directory (Azure AD). What should you use?

Accepted Answer

Correct answer: A. Azure Sentinel (Microsoft Sentinel) is the cloud-native SIEM/SOAR service that collects and automatically analyzes security events, including sign-in and audit events from Azure AD, and raises alerts. Synapse is analytics, AD Connect is directory sync, and Key Vault stores secrets.

Microsoft Azure Fundamentals AZ-900 — Question 256