Home › Azure AZ-500 › cloudcomputing › az500defendersentinel › Which Microsoft service is Azure's cloud-native …
Which Microsoft service is Azure's cloud-native SIEM + SOAR — ingesting logs from many sources and running analytics rules + automated playbooks?
AAzure Cache for Redis
BAzure DNS
CMicrosoft Sentinel
DAzure Bastion
Answer & Solution
Correct answer: C. Microsoft Sentinel
Sentinel is Microsoft's cloud SIEM + SOAR (per AZ-500 §4 Sentinel). The others aren't SIEMs.
Related questions
Which Azure feature should a security engineer use to BACK UP Key Vault keys + secrets + cWhich Azure Key Vault network setting should a security engineer enable to restrict accessWhich Azure governance service should a security engineer use to define and assign policieWhich Microsoft Sentinel feature lets a security engineer automatically respond to incidenWhich Microsoft Sentinel feature lets a security engineer define KQL queries that automatiWhich Microsoft Sentinel feature lets a security engineer ingest data from Azure / MicrosoWhich Microsoft Defender for Cloud feature lets a security engineer connect AWS / GCP enviWhich Microsoft Defender for Cloud plan should a security engineer enable to detect SQL in