SC-200 Practice Question 3684
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: hard
You want to ingest AWS CloudTrail management event logs into Microsoft Sentinel. What authentication mechanism is recommended to connect Microsoft Sentinel to the Amazon Web Services environment?
Answer Options
A
OpenID Connect (OIDC) or AWS AssumeRole with an External ID
B
Storing AWS root administrator passwords in cleartext in Sentinel
C
Connecting via an unencrypted FTP port 21 session
D
Manual daily download of AWS CSV files
Correct Answer
A: OpenID Connect (OIDC) or AWS AssumeRole with an External ID
Explanation
The Microsoft Sentinel AWS S3 or CloudTrail data connector utilizes OpenID Connect (OIDC) or AWS AssumeRole with an external ID to authenticate cross-cloud without storing static IAM secrets.