SC-200 Practice Question 3722
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: medium
You are configuring Microsoft Sentinel data connectors for Microsoft Entra ID. What log streams are available for collection directly into dedicated Sentinel tables?
Answer Options
A
SigninLogs, AuditLogs, NonInteractiveUserSignInLogs, and ProvisioningLogs
B
W3CIISLog and DnsEvents only
C
DeviceProcessEvents and DeviceNetworkEvents only
D
OfficeActivity and ThreatIntelligenceIndicator only
Correct Answer
A: SigninLogs, AuditLogs, NonInteractiveUserSignInLogs, and ProvisioningLogs
Explanation
Sign-in logs, Audit logs, Non-interactive sign-ins, Service principal sign-ins, Managed identity sign-ins, and Provisioning logs stream directly into tables like SigninLogs and AuditLogs.