I've got a good feeling about this one. The key details are the Continuous Pipeline Mode and the mix of STREAMING LIVE TABLE and LIVE TABLE datasets. I think option C is the most likely outcome, but I'll double-check my reasoning before submitting my answer.
I'm a bit confused by some of these options. Lindbergh flying combat missions doesn't seem right, and I'm not sure about the honorary degree either. I'll have to carefully consider the chronology here.
Okay, let me think this through. I believe the answer is to configure the Diagnostics settings in Azure AD to stream the events to an event hub, which the SIEM solution can then ingest. That seems like the most efficient way to get the data to the SIEM in near real-time.
Sharen
10 months agoEvan
10 months agoMarnie
11 months agoErnest
11 months agoElenora
11 months agoLorean
11 months agoMalcom
11 months agoXochitl
11 months agoAlpha
11 months agoLeonardo
11 months ago