An organization needs cloud security posture recommendations and regulatory control mappings, plus security-event correlation and incident response. Which two service roles match? Select 2 answers.

Select all that apply. Every correct option and no extras are required for credit in the app.

A.Sentinel for connected event correlation, incidents, and response.
B.Azure Policy alone as a replacement for every security-event incident-investigation workflow.
C.Azure Monitor alone as automatic legal certification of every regulatory obligation.
D.Defender for Cloud for posture assessments and supported compliance views.
E.Access reviews as the primary correlation engine for arbitrary workload threat events.

Show the answer and explanation

✓ Correct answers

Sentinel for connected event correlation, incidents, and response.
Defender for Cloud for posture assessments and supported compliance views.

Defender for Cloud supplies posture and supported compliance assessments, while Sentinel supplies security-event correlation and incident workflows. Azure Monitor supports observability rather than legal certification. Policy evaluates supported resource controls and does not replace all incident investigation; access reviews recertify identity access rather than function as a general SIEM. Source: AZ-305 Study Guide.pdf, PDF page(s) 20.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.