Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Microsoft AZ-500 Exam - Topic 2 Question 27 Discussion

Actual exam question for Microsoft's AZ-500 exam
Question #: 27
Topic #: 2
[All AZ-500 Questions]

You have a Microsoft Sentinel deployment.

You need to connect a third-party security solution to the deployment. The third-party solution will send Common Event Format (CER-formatted messages.

What should you include in the solution? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer: A

by Maile at Jul 24, 2022, 11:49 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Thurman
5 months ago
This is a solid approach, but I’m not convinced about the compatibility.
upvoted 0 times
...
Ira
6 months ago
I think you also need to configure the data connector settings.
upvoted 0 times
...
Edna
6 months ago
Wait, are we sure this will work with all third-party tools?
upvoted 0 times
...
Jospeh
6 months ago
Totally agree, that's the way to go!
upvoted 0 times
...
Yesenia
6 months ago
You need to set up the Common Event Format connector.
upvoted 0 times
...
Hassie
6 months ago
I remember we talked about how to configure the integration, but I’m a bit confused about whether to select the custom connector or the built-in one for this scenario.
upvoted 0 times
...
Kassandra
6 months ago
I feel like the answer involves setting up a specific connector for CEF messages, but I can't recall the exact steps we discussed in class.
upvoted 0 times
...
Aretha
6 months ago
I think we practiced a similar question where we had to choose between different protocols for data ingestion. Was it CEF or something else?
upvoted 0 times
...
Hillary
7 months ago
I remember something about using the Microsoft Sentinel data connectors for third-party solutions, but I'm not entirely sure which one applies here.
upvoted 0 times
...
Lashonda
7 months ago
Okay, I've got this. The question is asking us to deploy the entire application, so we'll need to create a Kubernetes resource for each microservice. Based on the options, a Deployment per microservice seems like the way to go.
upvoted 0 times
...
Basilia
7 months ago
Hmm, consistency points are usually a sign of performance issues. I'm thinking the best approach might be to convert the cluster to a switched configuration.
upvoted 0 times
...
Iola
7 months ago
Hmm, I'm a bit confused about the Finesse capabilities. I know it has some kind of API, but I'm not sure about the details. And I'm not sure what the other key capability is. I'll have to think this through carefully.
upvoted 0 times
...
Lera
7 months ago
I'm a bit confused. Was there a practice question that asked if only routine eye care was covered? I can't recall.
upvoted 0 times
...
Deeanna
7 months ago
Hmm, this seems like a tricky question. I'll have to think it through carefully. I'm leaning towards B, reading acquisition, since a reversal design wouldn't really work for evaluating something like that.
upvoted 0 times
...

Save Cancel