Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceHard
An e-commerce company is experiencing a significant increase in malicious login attempts and potential data exfiltration from their Azure resources. They need a cloud-native Security Information and Event Management (SIEM) solution that can collect security data from various sources (Azure logs, Microsoft 365, on-premises firewalls), detect advanced threats using AI and machine learning, and automate responses to security incidents. Which Azure service is best suited for this advanced threat detection and automated response?
- AAzure Security Center
- BAzure Firewall
- CAzure DDoS Protection
- DAzure Sentinel
Show answer & explanationAnswer & explanation
Correct answer: D. Azure Sentinel
Azure Sentinel is a cloud-native SIEM and Security Orchestration, Automation, and Response (SOAR) solution. It collects security data across your enterprise, performs intelligent threat detection using AI/ML, and enables automated responses to security incidents.
Why the other options are wrong
- A. Azure Security Center provides unified security management and threat protection for hybrid cloud workloads but is not a full-fledged SIEM for advanced threat detection and SOAR capabilities.
- B. Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources, not a SIEM for threat detection and response.
- C. Azure DDoS Protection protects against Distributed Denial of Service attacks, a specific type of threat, not a comprehensive SIEM.
Azure Sentinel
A scalable, cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution that provides intelligent security analytics and threat intelligence across the enterprise.
- Collects security data from multiple sources.
- Uses AI and machine learning for advanced threat detection.
- Enables automated responses (SOAR) to security incidents.
Memory trick: Sentinel is your AI-powered security guard watching all your digital doors.