Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
ChatGPT: To collect security event data from your Windows Server virtual machines in Microsoft Defender for Cloud, while keeping administration and cost minimal, you should: Enable Microsoft Defender for Servers (so Defender for Cloud can collect and analyze event data). Use auto-provisioning with the security event storage set to Common (to collect only essential events at lower cost).
Answers A & E are Incorrect. Why? A is related to compliance, not security deployment on AWS VMs. E (auto-provisioning) is useful for streamlining deployment once the basic security framework is in place but should be implemented after configuring the AWS connector and onboarding the virtual machines to Defender for Endpoint
why would one even think of Intune Manager when its just the Azure subsription