Microsoft Exam SC-200 Topic 3 Question 67 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 67
Topic #: 3

You have an Azure subscription that has Azure Defender enabled for all supported resource types.

You need to configure the continuous export of high-severity alerts to enable their retrieval from a third-party security information and event management (SIEM) solution.

To which service should you export the alerts?

AAzure Cosmos DB

BAzure Event Grid

CAzure Event Hubs

DAzure Data Lake

Show Suggested Answer

Suggested Answer: B

by Gayla at Mar 20, 2024, 08:53 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Shonda

4 days ago

I agree with Paulina. Azure Event Hubs can handle large amounts of data and is a good choice for exporting alerts.

upvoted 0 times

...

Paulina

7 days ago

I think the answer is C) Azure Event Hubs because it is designed for big data streaming.

upvoted 0 times

...