Knowledge check

Completed

Choose the best response for each of the questions below.

Check your knowledge

1.

What is one of the benefits of integrating Microsoft Sentinel and Defender XDR in the Defender portal?

It increases the complexity of managing and switching between multiple tools.

It streamlines operations and reduces the risk of errors that can occur when switching between different systems.

It requires context-switching when querying across different data sets.

2.

Which portal supports the functionality of adding entities to threat intelligence from incidents in Microsoft Sentinel?

Both Azure and Defender portals

Azure portal

Defender portal

3.

What is one of the product changes associated with connecting a workspace to Defender XDR?

Microsoft Sentinel Reader role is assigned to the Microsoft Threat Protection and WindowsDefenderATP apps within the subscription.

All Microsoft security incident creation rules are activated to avoid duplicate incidents.

Log tables, queries, and functions in the Microsoft Sentinel workspace are also available in advanced hunting within Defender XDR.

4.

What happens when a workspace is disconnected from the Defender portal in Microsoft Sentinel?

The Microsoft Sentinel section is removed from the left-hand side navigation of the Defender portal

The workspace is deleted from Microsoft Sentinel

Data from Microsoft Sentinel is still included on the Overview page

You must answer all questions before checking your work.