Azure Policy for Common Diagnostic Settings Configuration

Correct Answer: A

Azure Policy allows you to apply a common set of diagnostics logs settings to all (current and future) resources of a particular type whose logs you want to ingest into Azure Sentinel.

As of now 3 data connectors - Azure Key Vault, Azure Kubernetes Service and Azure SQL Databases have now been offered to be managed by Azure Policy.

Reference:

The data connector that uses Azure Policy to apply a common diagnostic settings configuration to a collection of resources of a single type is D. Azure Defender.

Azure Defender is a cloud security solution that helps customers protect their workloads in Azure and on-premises. It provides advanced threat protection for workloads, including virtual machines, containers, and serverless functions.

To enable Azure Defender, you need to create a security center and then onboard the resources you want to protect. After onboarding, you can use Azure Policy to apply a common diagnostic settings configuration to a collection of resources of a single type.

Azure Policy is a service in Azure that you use to create, assign, and manage policies. Policies are used to enforce rules and effects over your resources to ensure they remain compliant with corporate standards and service level agreements.

With Azure Policy, you can create a policy that specifies a diagnostic settings configuration that should be applied to a particular resource type. Once the policy is created, you can assign it to a scope that covers the resources you want to manage. When a resource is created, Azure Policy applies the diagnostic settings configuration automatically.

Therefore, D. Azure Defender is the correct answer to the question.