Microsoft Azure SC-200 Practice test Latest Updates

Microsoft Azure SC-200 Practice test Latest Updates What is SIEM? - Security Information and Event Management What is Microsoft Sentinel? - cloud-native SIEM system What is the first step of data ingestion for Microsoft Sentinel? - Data connectors After data is ingested into Microsoft Sentinel, where is it stored? - Log Analytics What language does Log Analytics use? - Kusto Query Language (KQL) What is used to create dashboards and visualization in Microsoft Sentinel? - Workbooks What is SOAR? - Security Orchestration, Automation, Response If you want to collect event data from various sources, and perform security operations on that data to identify suspicious activity, you should use ________________ - Microsoft Sentinel What does Microsoft Sentinel provide? - an end-to-end solution for security operations What language is used to query data within Microsoft Sentinel? - KQL Which Azure service stores the log data that is ingested into Microsoft Sentinel? - Log Analytics Within Microsoft Sentinel, which Azure product is used to run automated playbooks in response to alerts? - Azure Logic Apps ___________________ is a serverless, no-code solution for automating workflows. It integrates with hundreds of other services, making it a powerful solution for SOAR. - Azure Logic Apps The single most important option when creating a new Log Analytics Workspace is - the region To enable Microsoft Sentinel, you need ____________ permissions to the subscription in which the Microsoft Sentinel workspace resides - Contributor To use Microsoft Sentinel, you need either __________________ permissions on the resource group that the workspace belongs - contributor or reader Where is your log data stored? - Log Analytics workspace Which Microsoft Sentinel security role can create workbooks? - Microsoft Sentinel Contributor