Microsoft 365 Mobility and Security (legacy) — Question 100

You plan to use Microsoft Sentinel and Microsoft Defender for Cloud Apps.

You need to connect Microsoft Defender for Cloud Apps to Microsoft Sentinel.

What should you do in the Microsoft Defender for Cloud Apps portal?

Answer options

• A. From Automatic log upload, add a data source.
• B. From Automatic log upload, add a log collector.
• C. From Connected apps, add an app connector.
• D. From Security extensions, add a SIEM agent.

Correct answer: D

Explanation

The correct answer is D because adding a SIEM agent from the Security extensions is necessary to connect Microsoft Defender for Cloud Apps to Microsoft Sentinel. The other options do not facilitate the integration of these two services.