SC-200 Practice Question 3742
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: hard
You need to connect an external threat intelligence platform to Microsoft Sentinel via an API using Microsoft Graph. Which API endpoint facilitates this indicator upload?
Answer Options
A
Microsoft Graph Security threatIndicators API (tiIndicators)
B
Exchange ActiveSync mobile protocol
C
Windows Network File Sharing (SMB)
D
Simple Mail Transfer Protocol (SMTP)
Correct Answer
A: Microsoft Graph Security threatIndicators API (tiIndicators)
Explanation
The Microsoft Graph Security threatIndicators API (tiIndicators) uploads external STIX threat intelligence indicators directly into Microsoft Sentinel and Defender.