nerdexam
EC-Council

312-39 · Question #84

Global Bank relies heavily on Microsoft Azure to host critical banking applications and services. The SOC must ensure continuous monitoring, compliance, and real-time threat detection across Azure res

The correct answer is B. Azure Monitor. Azure Monitor is the Azure-native platform for collecting, analyzing, and visualizing telemetry across Azure resources, including metrics and logs from infrastructure, applications, and services. For SOC needs, it provides centralized observability: resource metrics, activity log

SOC Fundamentals and Operations

Question

Global Bank relies heavily on Microsoft Azure to host critical banking applications and services. The SOC must ensure continuous monitoring, compliance, and real-time threat detection across Azure resources. They need a comprehensive solution to collect, analyze, and visualize telemetry from cloud resources, VMs, storage, and applications, and integrate with security tools to detect anomalies and monitor performance. Which Azure service is best suited?

Options

  • AAzure Firewall
  • BAzure Monitor
  • CAzure Policy
  • DAzure Active Directory

How the community answered

(20 responses)
  • B
    95% (19)
  • D
    5% (1)

Explanation

Azure Monitor is the Azure-native platform for collecting, analyzing, and visualizing telemetry across Azure resources, including metrics and logs from infrastructure, applications, and services. For SOC needs, it provides centralized observability: resource metrics, activity logs, diagnostic logs, and integration with log analytics for query and alerting. This supports both performance monitoring and security monitoring by enabling detection of unusual behaviors (unexpected spikes, anomalous access patterns) and providing dashboards and alerting to support rapid response. Azure Firewall is a network security control focused on traffic filtering and policy enforcement; it does not serve as the comprehensive telemetry collection and visualization layer for all Azure resources. Azure Policy focuses on governance and compliance enforcement by evaluating and enforcing resource Directory is the identity service (now commonly referred to as Entra ID) and is essential for authentication/authorization, but it is not the cross-resource monitoring platform. Since the question emphasizes broad telemetry collection, analysis, and visualization across Azure resources for continuous monitoring, Azure Monitor is the correct service.

Topics

#Azure Monitor#cloud monitoring#telemetry collection#SIEM integration

Community Discussion

No community discussion yet for this question.

Full 312-39 Practice