Which of the following tools is primarily used in Microsoft Sentinel for threat detection and response?

• Microsoft Defender for Cloud

• Azure Security Center

• Kusto Query Language (KQL)

• Microsoft Defender for Identity

Which of the following is NOT a key responsibility of a SOC Analyst?

• Threat hunting

• Network security monitoring

• Application development

• Incident response

Which Microsoft security solution helps detect and respond to threats in Microsoft 365?

• Microsoft Defender for Office 365

• Microsoft Sentinel

• Microsoft Intune

• Azure Active Directory

What is the default retention period for logs in Microsoft Sentinel?

• 7 days

• 30 days

• 90 days

• 365 days

Which of the following is a common SOC monitoring tool used for real-time threat detection?

• Wireshark

• SolarWinds

• SIEM (Security Information and Event Management)

• Visual Studio Code

Which of the following roles is responsible for investigating security incidents in Microsoft Defender?

• Security Administrator

• Compliance Officer

• Security Operations Analyst

• Network Engineer

Which service in Microsoft Defender is specifically designed to protect endpoints?

• Microsoft Defender for Identity

• Microsoft Defender for Endpoint

• Microsoft Defender for Cloud

• Microsoft Defender for Office 365

Which query language is used in Microsoft Sentinel to analyze security logs?

• SQL

• Python

• KQL (Kusto Query Language)

• PowerShell

Which Microsoft service is used for analyzing and responding to identity-based threats?

• Microsoft Defender for Endpoint

• Microsoft Defender for Identity

• Microsoft Sentinel

• Microsoft Defender for Cloud

What is the main purpose of a Security Orchestration, Automation, and Response (SOAR) tool?

• Automate security processes

• Develop security policies

• Replace SIEM systems

• Scan endpoints for vulnerabilities