Deploying Azure Virtual Machines: Choosing the Right Cloud Deployment Solution

Platform as a Service (PaaS) for Deploying Azure Virtual Machines

Prev Question Next Question

Question

Which Azure service can you use as a security information and event management (SIEM) solution?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

B

Microsoft Sentinel is a scalable, cloud-native, security information and event management (SIEM) and security orchestration, automation, and response (SOAR) solution. Microsoft Sentinel delivers intelligent security analytics and threat intelligence across the enterprise, providing a single solution for attack detection, threat visibility, proactive hunting, and threat response.

https://docs.microsoft.com/en-us/azure/sentinel/overview

The correct answer is B. Microsoft Sentinel.

Microsoft Sentinel is a cloud-native security information and event management (SIEM) solution that allows you to collect, analyze, and respond to security events across your organization's hybrid environments. It uses artificial intelligence (AI) and machine learning (ML) to detect and respond to threats in real-time, providing comprehensive visibility into your security posture.

Azure Analysis Services is an analytics engine that allows you to create business intelligence models and reports based on your data. It is not designed to provide security information and event management capabilities.

Azure Information Protection is a data protection solution that helps classify, label, and protect sensitive information. While it provides data protection features, it is not designed to provide SIEM capabilities.

Azure Cognitive Services is a suite of AI and ML services that allow you to add intelligent features to your applications. It includes services such as text analytics, speech recognition, and image recognition, but does not provide SIEM capabilities.

In summary, if you need a SIEM solution in Azure, Microsoft Sentinel is the recommended option.