nerdexam
Microsoft

AZ-801 · Question #146

You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Sentinel instance. You add the Windows Firewall data connector in Microsoft Sentinel. You need to ensure…

The correct answer is B. No. Installing the Microsoft Integration Runtime on Server1 does not meet the goal of collecting Windows Firewall logs for Microsoft Sentinel.

Secure Windows Server on-premises and hybrid infrastructures

Question

You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Sentinel instance. You add the Windows Firewall data connector in Microsoft Sentinel. You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1. Solution: You install the Microsoft Integration Runtime on Server1. Does this meet the goal?

Exhibit

AZ-801 question #146 exhibit

Options

  • AYes
  • BNo

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    93% (28)

Why each option

Installing the Microsoft Integration Runtime on Server1 does not meet the goal of collecting Windows Firewall logs for Microsoft Sentinel.

AYes

This option states "Yes", which is incorrect because the Microsoft Integration Runtime is not used for collecting Windows Firewall logs for Microsoft Sentinel.

BNoCorrect

The Microsoft Integration Runtime is primarily used by Azure Data Factory and Azure Synapse Analytics to move data between cloud services and on-premises data sources or run data integration activities, which is unrelated to collecting Windows Firewall logs for Microsoft Sentinel.

Concept tested: Sentinel Windows Firewall data collection

Source: https://learn.microsoft.com/en-us/azure/data-factory/create-self-hosted-integration-runtime

Topics

#Microsoft Sentinel#Data Collection#Windows Firewall#On-premises Integration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-801 Practice