Microsoft Azure Fundamentals (AZ-900)Describe Azure management and governanceHard

An e-commerce company is experiencing a significant increase in malicious login attempts and potential data exfiltration from their Azure resources. They need a cloud-native Security Information and Event Management (SIEM) solution that can collect security data from various sources (Azure logs, Microsoft 365, on-premises firewalls), detect advanced threats using AI and machine learning, and automate responses to security incidents. Which Azure service is best suited for this advanced threat detection and automated response?

  1. AAzure Security Center
  2. BAzure Firewall
  3. CAzure DDoS Protection
  4. DAzure Sentinel
Show answer & explanation

Correct answer: D. Azure Sentinel

Azure Sentinel is a cloud-native SIEM and Security Orchestration, Automation, and Response (SOAR) solution. It collects security data across your enterprise, performs intelligent threat detection using AI/ML, and enables automated responses to security incidents.

Why the other options are wrong

  • A. Azure Security Center provides unified security management and threat protection for hybrid cloud workloads but is not a full-fledged SIEM for advanced threat detection and SOAR capabilities.
  • B. Azure Firewall is a managed, cloud-based network security service that protects your Azure Virtual Network resources, not a SIEM for threat detection and response.
  • C. Azure DDoS Protection protects against Distributed Denial of Service attacks, a specific type of threat, not a comprehensive SIEM.

Azure Sentinel

A scalable, cloud-native Security Information and Event Management (SIEM) and Security Orchestration, Automation, and Response (SOAR) solution that provides intelligent security analytics and threat intelligence across the enterprise.

  • Collects security data from multiple sources.
  • Uses AI and machine learning for advanced threat detection.
  • Enables automated responses (SOAR) to security incidents.

Memory trick: Sentinel is your AI-powered security guard watching all your digital doors.

More Describe Azure management and governance questions