SC-200 Practice Question 3711

Exam: SC-200
Domain: Manage a security operations environment
Difficulty: medium
You need to configure threat intelligence ingestion into Microsoft Sentinel using STIX/TAXII standards. Which data connector should you configure?

Answer Options

A
Threat Intelligence - TAXII data connector
B
DNS connector
C
Syslog over UDP connector
D
Windows Security Events via AMA

Correct Answer

A: Threat Intelligence - TAXII data connector

Explanation

The Threat Intelligence - TAXII data connector connects to TAXII 2.0 and 2.1 servers to import STIX format threat intelligence indicators into the ThreatIntelligenceIndicator table.