Question 1 of 30
A company has implemented Azure Sentinel to enhance its security posture. They want to integrate Azure Monitor to collect and analyze logs from various sources, including Azure resources and on-premises systems. The security team is particularly interested in identifying anomalies in user behavior and potential security threats. Which approach should the team take to effectively utilize Azure Monitor alongside Azure Sentinel for this purpose?
Configure Azure Monitor to collect logs from Azure resources and set up custom alerts based on specific user activity patterns, which can then be analyzed in Azure Sentinel for anomalies and threats.
Rely solely on Azure Sentinel to collect all logs and alerts without integrating Azure Monitor, as Sentinel has built-in capabilities for log analysis.
Use Azure Monitor to collect logs but ignore custom alert configurations, allowing Azure Sentinel to automatically detect anomalies without any predefined parameters.
Set up Azure Monitor to collect logs only from on-premises systems, as Azure Sentinel can analyze these logs without needing Azure resource data.

Preparing for Microsoft SC-300 Microsoft Identity and Access Administrator? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free