SC-200 Practice Question 3718
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: hard
What is the role of an Enterprise Application registration when configuring a custom REST API data connector for Microsoft Sentinel using Azure Functions?
Answer Options
A
Provides an identity with API permissions to ingest data via REST
B
Provides a public website for users to browse logs
C
Assigns licenses to security analysts automatically
D
Deletes old logs from the workspace
Correct Answer
A: Provides an identity with API permissions to ingest data via REST
Explanation
The Entra ID App Registration provides an identity (client ID and secret/certificate) with Log Analytics Data Collector API permissions for the Function to ingest data.