Ingest data into the Microsoft Sentinel SIEM and platform
3 practice questions under this official exam objective (SC-200), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
3 total · page 1 of 1How do you enable Sentinel UEBA and collect on-premises AD DS events?
Enabling UEBA in Microsoft Sentinel for an on-premises Active Directory domain requires Microsoft Defender for Identity as the identity data source, n
Labeling an IP address entity as an IoC directly from a Sentinel incident
From a Sentinel incident's page, you can add an entity as a threat indicator (IoC) only for supported types—IP address (IPv4/IPv6), domain, URL, and f
Selecting the Common Windows Security event set to get a user audit trail while minimizing
To ingest Windows Security event logs into Sentinel with a full user sign-in/sign-out audit trail while minimizing event volume and effort, select the