SC-200 Practice Question 3726
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: hard
You want to configure Microsoft Sentinel to ingest audit logs from an on-premises Oracle database. Which connector architecture is supported?
Answer Options
A
Azure Monitor Agent or custom Logstash/Syslog forwarders via ingestion API
B
Direct USB cable connection to the Oracle database server
C
Printing database tables on paper and scanning them with OCR
D
Oracle databases cannot send logs to Microsoft Sentinel
Correct Answer
A: Azure Monitor Agent or custom Logstash/Syslog forwarders via ingestion API
Explanation
Deploy the Azure Monitor Agent or a custom Logstash/Syslog forwarder utilizing the Log Analytics ingestion API to parse and forward database audit records.