Practice Test 2 | Microsoft Azure Security Technologies | AZ-500 | Dumps | Mock Test
A company needs to create a custom alert rule in Microsoft Sentinel. Which of the following actions need to be performed for this requirement?
A. Enable Azure AD Identity Protection.
B. Create an Azure Storage Account.
C. Create an Azure Log Analytics Workspace.
D. Upgrade the pricing tier of Security Center.
Correct Answer – C
One of the key requirements to work with Microsoft Sentinel, as mentioned in the Microsoft documentation, is to have an Azure Log Analytics workspace.
Once Microsoft Sentinel is in place, you can get create alerts in Azure Sentinel – Analytics.
Since this is clearly mentioned in the Microsoft documentation and implementation, all other options are incorrect.
For more information on starting with Microsoft Sentinel, one can visit the below URL-
Comments are closed, but trackbacks and pingbacks are open.