Valid SC-300 Dumps shared by ExamDiscuss.com for Helping Passing SC-300 Exam! ExamDiscuss.com now offer the newest SC-300 exam dumps, the ExamDiscuss.com SC-300 exam questions have been updated and answers have been corrected get the newest ExamDiscuss.com SC-300 dumps with Test Engine here:
You have an Azure Active Directory (Azure AD) tenant named contoso.com that has Azure AD Identity Protection policies enforced. You create an Azure Sentinel instance and configure the Azure Active Directory connector. You need to ensure that Azure Sentinel can generate incidents based on the risk alerts raised by Azure AD Identity Protection. What should you do first?
Recent Comments (The most recent comments are at the top.)
sam - Sep 25, 2024
Add a Microsoft Sentinel Data connector is the wrong answer. Meant to mislead. Because question itself mentions that AAD connector was added. Which seem to cover all AAD functionality including Identity Protection feature. What you are asked to do is generate incidents based on the risk alerts. For that you use playbooks in Sentinel. Which automates tasks that SOC engineers need to such as generte risk alerts. So answer is C.
Recent Comments (The most recent comments are at the top.)
Add a Microsoft Sentinel Data connector is the wrong answer. Meant to mislead.
Because question itself mentions that AAD connector was added. Which seem to cover all AAD functionality including Identity Protection feature.
What you are asked to do is generate incidents based on the risk alerts.
For that you use playbooks in Sentinel. Which automates tasks that SOC engineers need to such as generte risk alerts. So answer is C.