FREE SC-900 Microsoft Sentinel as SIEM and SOAR Questions and Answers

Question 1

What are the two primary functions that define Microsoft Sentinel's role in a security operations center?

Accepted Answer

SIEM and SOAR

Answer

Firewall and Antivirus

Answer

Identity and Access Management

Answer

Data Loss Prevention and Information Protection

Question 2

How does Microsoft Sentinel collect log data from various sources like Azure services, Microsoft 365, and on-premises systems?

Accepted Answer

By configuring data connectors

Answer

Using analytics rules

Answer

Through Azure Policy assignments

Answer

Via Sentinel playbooks

Question 3

In Microsoft Sentinel, what component, powered by Azure Logic Apps, is used to automate responses to security alerts?

Accepted Answer

Playbooks

Answer

Workbooks

Answer

Hunting queries

Answer

Data connectors

Question 4

What is the term for a group of related alerts in Microsoft Sentinel that are aggregated to represent a potential security attack?

Accepted Answer

An Incident

Answer

An Event

Answer

A Workbook

Answer

A Playbook

Question 5

Which query language is used to create analytics rules, perform threat hunting, and visualize data in Microsoft Sentinel workbooks?

Accepted Answer

Kusto Query Language (KQL)

Answer

SQL

Answer

PowerShell

Answer

Python

Question 6

A security analyst wants to proactively search for new and unknown threats in their organization's data. Which Microsoft Sentinel feature should they use?

Accepted Answer

Hunting

Answer

Incidents

Answer

Workbooks

Answer

Data Connectors