AZURE SENTINEL

What does Azure Sentinel provide?

• A solution for checking your security posture in the cloud

• An end-to-end solution for security operations

• A solution for securely storing keys and secrets in the cloud

Which language is used to query data within Azure Sentinel?

• SQL

• GraphQL

• KQL

Which Azure service stores the log data that is ingested into Azure Sentinel?

• Azure Data Factory

• Log Analytics

• Azure Monitor

Within Azure Sentinel, which Azure product is used to run automated playbooks in response to alerts?

• Log Analytics

• Azure Monitor

• Azure Logic Apps

How does Azure Sentinel use machine learning and AI?

• Feedback loop detection

• Alert detection

• Security score

Azure Sentinel hunting and search-and-query tools are based on which of the following?

• Center for Internet Security best practices

• MITRE ATT&CK framework

• Microsoft Security Development Lifecycle (SDL)

The Azure Sentinel agent is which of the following?

• Log Analytics agent

• REST API

• Certificate

Which of the following actions can the Azure Sentinel Reader role perform?

• Edit workbooks

• Review data, incidents, workbooks, and other Azure Sentinel resources

• Create and run Azure Sentinel security playbooks

Which of the following is required to connect Azure Sentinel to Azure AD?

• You need an Azure AD P1 or P2 license

• You must use Azure AD Connect

• Azure AD Domain Services must be enabled

Which of the following is a typical scenario for using an Azure Sentinel watchlist?

• Creating more alerts to help identify issues

• Export business data as a watchlist

• Responding to incidents quickly with the rapid import of IP addresses