Microsoft Exam AZ-801 Topic 6 Question 45 Discussion

Actual exam question for Microsoft's AZ-801 exam

Question #: 45
Topic #: 6

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it as a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentine1.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Azure Connected Machine agent on Server1.

Does this meet the goal?

AYes

BNo

Show Suggested Answer

Suggested Answer: B

by Carin at Dec 26, 2023, 09:13 PM

Limited Time Offer

25%

Off

Get Premium AZ-801 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lorrie

8 months ago

Haha, yeah, it's like they're trying to make us install the kitchen sink just to get some firewall logs. I agree, the solution seems a bit convoluted. Let's think this through a bit more before we commit to an answer.

upvoted 0 times

...

Audry

8 months ago

Absolutely, that's what I was thinking. The question specifically mentions the Windows Firewall data connector, so I would expect the solution to involve that, not installing some additional agent. Maybe the Azure Connected Machine agent is overkill for this scenario.

upvoted 0 times

...

Janey

8 months ago

Yeah, I'm with you on that. Installing the Azure Connected Machine agent doesn't seem like the most straightforward way to collect Windows Firewall logs. Shouldn't there be a more direct method, like configuring the Windows Firewall data connector?

upvoted 0 times

...

8 months ago

A) Yes

upvoted 0 times

...