Skip to content
AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
medium
Question 5 of 68

A SOC team wants to correlate its own list of high-value assets and terminated employees with ingested security events in Microsoft Sentinel. Which feature should it use?

AWatchlists
BPacket capture
CPrivate Link
DResource locks

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion