Microsoft Exam SC-200 Topic 3 Question 67 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 67
Topic #: 3

You have an Azure subscription that has Azure Defender enabled for all supported resource types.

You need to configure the continuous export of high-severity alerts to enable their retrieval from a third-party security information and event management (SIEM) solution.

To which service should you export the alerts?

AAzure Cosmos DB

BAzure Event Grid

CAzure Event Hubs

DAzure Data Lake

Show Suggested Answer

Suggested Answer: B

by Gayla at Mar 20, 2024, 08:53 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Blair

1 months ago

I'm feeling confident about Option C. Azure Event Hubs is the perfect conduit to shuttle those high-severity alerts straight into the SIEM system. It's like a security data superhighway, baby!

upvoted 0 times

Portia

2 days ago

I agree, it's a great choice for exporting alerts.

upvoted 0 times

...

Leonie

3 days ago

I think Azure Event Hubs is the way to go.

upvoted 0 times

...

Option C all the way! Azure Event Hubs is the way to go. I can practically hear the alerts streaming in as we speak. Plus, it's got that cool name - like a cosmic event hub for security data or something.

upvoted 0 times

Vesta

4 days ago

I agree, Azure Event Hubs is the best choice for exporting high-severity alerts.

upvoted 0 times

...

2 months ago

I think I'll go with Option C. Azure Event Hubs seems like the logical choice for exporting high-severity alerts to a SIEM solution. It's designed for real-time data ingestion, which is perfect for this use case.

upvoted 0 times

Hannah

2 months ago

Yes, Azure Event Hubs is designed for real-time data ingestion, making it a great choice for this scenario.

upvoted 0 times

...

Whitney

2 months ago

I agree, Azure Event Hubs is the best option for exporting high-severity alerts.

upvoted 0 times

...

Ilda

2 months ago

I'm not sure about that. I think D) Azure Data Lake could also be a valid option for exporting high-severity alerts.

upvoted 0 times

...

Shonda

3 months ago

I agree with Paulina. Azure Event Hubs can handle large amounts of data and is a good choice for exporting alerts.

upvoted 0 times

...

Paulina

3 months ago

I think the answer is C) Azure Event Hubs because it is designed for big data streaming.

upvoted 0 times

...

Microsoft Exam SC-200 Topic 3 Question 67 Discussion

Contribute your Thoughts:

Blair

Portia

Leonie

Sherly

Vesta

Timmy

Jacob

Edmond

Francesco

Evelynn

Pura

Hannah

Whitney

Ilda

Shonda

Paulina