MENU
You have a third-party security information and event management (SIEM) solution.
You need to ensure that the SIEM solution can generate alerts for Azure Active Directory (Azure AD) sign-events in near real time.
What should you do to route events to the SIEM solution?
Suggested Answer: B
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
WI
Wilbert
11 months ago
I’m not so sure about C, isn’t it just for monitoring?
CH
Cheryl
12 months ago
Totally agree with B, it’s the most efficient method!
OW
Owen
12 months ago
Wait, can you really get near real-time with option D? Seems off.
MA
Marshall
1 year ago
I think A is better for security events specifically.
PE
Pearlene
1 year ago
Option B is the way to go for real-time alerts!
EM
Emilio
1 year ago
I remember that archiving to a storage account wouldn't help with real-time alerts, so I think that option can be ruled out right away.
EL
Elenora
1 year ago
I’m a bit confused between the Azure Sentinel workspace options. I thought both connectors could work, but I can't recall which one is specifically for Azure AD sign-in events.
TE
Temeka
1 year ago
I practiced a similar question where we had to set up alerts for Azure AD, and I feel like the event hub option was the right choice for real-time alerts.
LO
Lottie
1 year ago
I think I remember something about using Azure AD diagnostics settings to stream events, but I'm not sure if it's to an event hub or something else.
YO
Youlanda
1 year ago
I'm pretty confident about this one. I think the key is understanding the core principles of SDN, like the separation of control and data planes. Option B looks like the correct answer to me.
AL
Alpha
1 year ago
Hmm, this seems like a tricky one. I'll need to carefully consider the different leadership styles and how they relate to the description provided.
VA
Vanda
1 year ago
I think it's similar to the practice question we did on hedging with swaptions. You want to limit losses while taking advantage of potential gains, right?
AU
Audry
1 year ago
I'm not entirely sure, but I feel like poor password management was also mentioned a lot in our studies.
FL
Floyd
1 year ago
I'm a little confused by this question. There seem to be a lot of options, and I'm not sure which two are the correct steps. I'll have to read through it again carefully and try to eliminate the wrong answers.