Microsoft AZ-801 Exam - Topic 6 Question 44 Discussion

Actual exam question for Microsoft's AZ-801 exam

Question #: 44
Topic #: 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentine1.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Azure Connected Machine agent on Server1.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

by Jolene at Dec 11, 2023, 11:59 PM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Huey

4 months ago

Totally agree, but I’m not sure about the specifics!

upvoted 0 times

...

Lorenza

4 months ago

Wait, does that really work for Windows Firewall logs?

upvoted 0 times

...

Yuette

4 months ago

Installing the agent is definitely necessary.

upvoted 0 times

...

Ashton

4 months ago

I think it’s a bit more complicated than that.

upvoted 0 times

...

Kerrie

5 months ago

Yes, that’s the right move!

upvoted 0 times

...

Arlie

5 months ago

I’m a bit confused; I thought the agent was necessary, but I can't remember if it was sufficient by itself. Maybe I should have reviewed the requirements more closely.

upvoted 0 times

...

Valene

5 months ago

I’m leaning towards "No" because I recall that the data connector might require specific settings or permissions to work properly with the logs.

upvoted 0 times

...

Erick

5 months ago

I remember a practice question where we had to ensure log collection from on-prem servers, and I feel like there were additional configurations needed beyond just the agent.

upvoted 0 times

...

Gilberto

5 months ago

I think installing the Azure Connected Machine agent is a step in the right direction, but I'm not entirely sure if it alone is enough for collecting the logs.

upvoted 0 times

...

Jaime

5 months ago

I'm not entirely sure about this one. The question mentions a "unique solution" for each question, so I want to make sure I'm not missing something. I'll review the information carefully before answering.

upvoted 0 times

...

Cassi

5 months ago

I've got this! The Azure Connected Machine agent is the way to go. It'll connect Server1 to Microsoft Sentinel and allow the firewall logs to be collected. Easy peasy.

upvoted 0 times

...

Joanna

5 months ago

Okay, let me think this through step-by-step. The question says we need to ensure Microsoft Sentinel can collect Windows Firewall logs from Server1. Installing the Azure Connected Machine agent sounds like a reasonable approach, but I'll double-check the documentation to be sure.

upvoted 0 times

...

Emogene

5 months ago

I'm a bit confused by the wording of the question. Does the Azure Connected Machine agent really meet the goal, or is there another solution I'm missing?

upvoted 0 times

...

Queenie

6 months ago

Hmm, this seems straightforward. I'll need to check the requirements carefully and make sure the Azure Connected Machine agent is the right solution.

upvoted 0 times

...

Evan

6 months ago

This seems like a good opportunity to showcase my knowledge of industrial operations and monitoring solutions.

upvoted 0 times

...

Deonna

6 months ago

Okay, let me break this down. Payroll and expense frauds involve payments to external parties, while billing schemes involve payments to employees. So I think the answer is True.

upvoted 0 times

...

Johnetta

6 months ago

Hmm, I'm not sure about this one. The connection between communism and radical Islam isn't totally clear to me. I'll have to think it through carefully.

upvoted 0 times

...

Tandra

2 years ago

I'm with you guys. This solution just doesn't seem right. It's like trying to use a screwdriver to hammer in a nail. There's got to be a more logical way to get those Windows Firewall logs into Sentinel.

upvoted 0 times

...

Annelle

2 years ago

Hmm, this is a tricky one. I'm wondering if the solution is missing a step or if there's a different approach we should be considering. Maybe we need to look at configuring the Windows Event Forwarding or something along those lines to get the logs into Sentinel.

upvoted 0 times

...

Pearlene

2 years ago

Yeah, I agree. The Azure Connected Machine agent is typically used for Azure Arc, which is for managing hybrid and multi-cloud environments. I'm not sure how that would help us collect Windows Firewall logs on an on-premises server.

upvoted 0 times

Carin

2 years ago

upvoted 0 times

...

Luis

2 years ago

upvoted 0 times

...

Edgar

2 years ago

I'm not sure about this question. The solution provided seems a bit odd to me. Installing the Azure Connected Machine agent on the on-premises server to collect Windows Firewall logs? Shouldn't we be looking at a more straightforward way to connect the logs to Sentinel?

upvoted 0 times

...