Configuring Sentinel Data Connectors

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Monitoring and Automation

What you'll be asked

  1. Which blade in the Microsoft Sentinel portal is used to enable and configure data ingestion from various sources such as Microsoft 365, Azure, and external security appliances?
  2. When configuring a Syslog data connector to collect logs from an on-premises Linux server, which component must be installed on the Linux machine to forward the data to Sentinel?
  3. You are setting up a Microsoft 365 Defender connector. What is the primary prerequisite that must be met before you can successfully enable the connector in Sentinel?
  4. A security analyst needs to ingest logs from a third-party firewall that is not natively supported by the standard list of Sentinel connectors. Which method should be used to ingest this data?
  5. When configuring a Common Event Format (CEF) connector, you notice that data is not appearing in the 'CommonSecurityLog' table. What is the most likely cause, assuming the agent is running correctly?

Answers and explanations come after you submit.