SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Sentinel Capabilities 2

Question 1

What type of data connectors does Microsoft Sentinel use to ingest data from Microsoft 365 services?

Accepted Answer

Built-in Microsoft connectors

Answer

JDBC connectors

Answer

Third-party REST APIs only

Answer

Manual CSV uploads

Question 2

Which Microsoft Sentinel feature allows security analysts to automate responses to detected threats?

Accepted Answer

Playbooks

Answer

Workbooks

Answer

Watchlists

Answer

Hunting queries

Question 3

What is the primary purpose of Microsoft Sentinel Workbooks?

Accepted Answer

To visualize and monitor security data through interactive dashboards

Answer

To automate incident response

Answer

To store threat intelligence feeds

Answer

To configure data connectors

Question 4

In Microsoft Sentinel, what are Analytics Rules primarily used for?

Accepted Answer

Detecting threats by generating alerts from log data

Answer

Visualizing security data

Answer

Storing raw log data

Answer

Managing user permissions

Question 5

Which Microsoft Sentinel component helps analysts proactively search for threats that haven't triggered automated alerts?

Accepted Answer

Hunting

Answer

Incidents

Answer

Playbooks

Answer

Watchlists

Question 6

What is a Microsoft Sentinel Watchlist?

Accepted Answer

A curated set of data imported from external sources used to correlate against event data

Answer

A list of blocked IP addresses in the firewall

Answer

A queue of pending incidents for analysts

Answer

A list of approved software applications

Question 7

Which language is used to write queries in Microsoft Sentinel for log analysis and hunting?

Accepted Answer

Kusto Query Language (KQL)

Answer

SQL

Answer

Python

Answer

PowerShell