SC-100 Practice Question 3895
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: easy
You are designing an integrated Security Operations Center (SOC) architecture. You need to combine Extended Detection and Response (XDR) telemetry with cloud Security Information and Event Management (SIEM). Which Microsoft platforms fulfill these complementary roles?
Answer Options
A
Microsoft Defender XDR for workload XDR; Microsoft Sentinel for enterprise SIEM/SOAR
B
Windows Defender Firewall for SIEM; Microsoft Excel for SOAR
C
Microsoft Intune for XDR; Azure DNS for SIEM
D
Exchange Online Protection for SIEM; SharePoint Online for XDR
Correct Answer
A: Microsoft Defender XDR for workload XDR; Microsoft Sentinel for enterprise SIEM/SOAR
Explanation
Microsoft Defender XDR provides native, workload-specific XDR protection across endpoints, identities, and email; Microsoft Sentinel provides centralized SIEM and SOAR across multi-cloud enterprise logs.