Sentinel

What is Microsoft Sentinel ?

• A type of antivirus software

•  A cloud-native security information and event management (SIEM) system

• A virtual private network (VPN) service

•  A social media monitoring tool

What type of security events can Microsoft Sentinel detect ?

• Cyberattacks

• Insider threats

• Unauthorized access attempts

•  All of the above

What other Microsoft security tool can integrate with Microsoft Sentinel ?

• Microsoft Defender for Endpoint

• Microsoft Office

• Microsoft Excel

• Microsoft Teams

What cloud platforms can Microsoft Sentinel monitor ?

• Microsoft Azure

• Amazon Web Services (AWS)

• Google Cloud Platform (GCP)

• All of the above

How is a SIEM prioritizing the alerts ? By :

• Location

• Severity

• Endpoints

• Date

What CAN'T you see in the Sentinel reporting dashboard ?

• Events

• Alerts

• Updates

• Incidents

Can you see what a hacker is doing in real time with Sentinel ?

• Yes

• No

What is MITRE ATTACK ?

• The SIEM of Palo Alto

• The previous name of Sentinel

• Feature that shows attacker's framework in Sentinel

 

What is the pricing model for Microsoft Sentinel ?

• A flat monthly fee

• A pay-per-usage model

• A percentage of the company's revenue

• Microsoft Sentinel is free to use

What type of machine learning capabilities does Microsoft Sentinel have ?

• Anomaly detection

• Behavioral analytics

• Threat intelligence

• All of the above