Microsoft
AZ-801 · Question #184
You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Sentinel workspace named sentinel. You need to collect Windows Defender Firewall events from Server1 to sent
Sign in or unlock AZ-801 to reveal the answer and full explanation for question #184. The question stem and answer options stay visible for context.
Secure Windows Server on-premises and hybrid infrastructures
Question
You have an on-premises server named Server1 that runs Windows Server. You have a Microsoft Sentinel workspace named sentinel. You need to collect Windows Defender Firewall events from Server1 to sentinel. Which two pages should you use in the Azure portal? To answer, select the appropriate pages in the answer area. NOTE: Each correct selection is worth one point.
Exhibit
Unlock AZ-801 to see the answer
You've previewed enough free AZ-801 questions. Unlock AZ-801 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Microsoft Sentinel#Data Connectors#Windows Defender Firewall#Hybrid Integration