SC-100 Practice Question 3948
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: medium
You are architecting threat intelligence ingestion into Microsoft Sentinel. What open-standard threat feed protocol allows automated, structured STIX 2.1 indicator streaming into Sentinel tables?
Answer Options
A
Threat Intelligence - TAXII data connector
B
DNS connector
C
Common Event Format (CEF) over Syslog
D
Windows Security Events via AMA
Correct Answer
A: Threat Intelligence - TAXII data connector
Explanation
The Threat Intelligence - TAXII data connector connects to TAXII (Trusted Automated eXchange of Indicator Information) servers to pull STIX indicators into the ThreatIntelligenceIndicator table.