Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question
Microsoft Sentinel combines SIEM and SOAR capabilities in a single cloud service. Which of the following best illustrates the SOAR aspect of Microsoft Sentinel?
Encrypting data at rest and in transit across all Azure services used by the solution.
Automatically running a playbook that disables a user account and creates a help-desk ticket when an alert is raised.
Ingesting and correlating security event logs from on-premises firewalls and cloud workloads in near real time.
Enforcing conditional access policies to require multifactor authentication for risky sign-in attempts.
SIEM (Security Information and Event Management) focuses on collecting, correlating, and analyzing security log and event data. SOAR (Security Orchestration Automated Response) builds on those insights by automating and orchestrating actions that remediate or contain threats. In Microsoft Sentinel, playbooks created with Azure Logic Apps can automatically perform tasks such as sending alerts, opening help-desk tickets, or isolating compromised hosts when specific analytics rules trigger. This automated response workflow is characteristic of SOAR, whereas log collection, threat detection, or encryption services are not unique to SOAR.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the difference between SIEM and SOAR?
Open an interactive chat with Bash
What is a playbook in Microsoft Sentinel?
Open an interactive chat with Bash
How does Microsoft Sentinel enable automation with Azure Logic Apps?
Open an interactive chat with Bash
Microsoft Security, Compliance, and Identity Fundamentals SC-900
Describe the capabilities of Microsoft security solutions
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .