Microsoft Certified: Security Operations Analyst Associate Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose C2

  On exam, December 2025 Small change: It says "The Microsoft Office 365 connector" these days.

• Chose D2

  Office 365 connector is a sentinel concept, not defender for cloud's - if it were microsoft 365 connector it would right (even if with outdated terminology). You don't use connectors in MS XDR context, and office 365 has nothing to do with cloud apps, its for defender for office 365. Automatic log upload settings is the best choice, as it necessary to do.

• 1

  Needs to be Microsoft 365 Connector. I will go with D as well.