Questions

To test your understanding of integrating Microsoft 365 Defender with Microsoft Sentinel, take a shot at the following questions:

1. A serious incident in your Microsoft 365 Defender portal is made up of 140 alerts. How would you expect Microsoft Sentinel to respond to this? Choose one.
   1. Sentinel will split the incident into two incidents
   2. Sentinel will have one incident with all alerts
   3. Sentinel will redirect you to Microsoft 365 Defender to see all the alerts
   4. Sentinel will hide alerts with a lower priority
2. Which of the following components would not fall into scope for Microsoft 365 Defender’s connector to Sentinel? Choose all that apply.
   1. Azure Active Directory Identity Protection
   2. Microsoft Defender Vulnerability Management
   3. Microsoft Purview Data Loss Prevention
   4. Microsoft Defender for SQL
3. You are using Microsoft Sentinel to create queries for your SOC team. Which of the following tables would be most appropriate to find out the severity of an alert as determined...