Configuring Windows Server Hybrid Advanced Services — Question 23

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentinel.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You install the Log Analytics agent on Server1.

Does this meet the goal?

Answer options

Correct answer: A

Explanation

Installing the Log Analytics agent on Server1 is the correct approach as it allows for the collection of logs, including Windows Firewall logs, and sends them to Microsoft Sentinel. The other option, 'No', is incorrect because not installing the agent would prevent the necessary log collection, thereby failing to meet the goal.