ExpertAZ-305 · Question 04 · Domain 1.1: Logging and Monitoring
You are designing an Azure Sentinel architecture for a Managed Security Service Provider (MSSP).
The MSSP manages security for 15 different enterprise customers. Each customer has their own Azure Active Directory (Microsoft Entra ID) tenant and strict data residency requirements (some in the US, some in the EU). The MSSP's Security Operations Center (SOC) team needs to view and correlate incidents across all 15 customers from a single pane of glass.
Which TWO technologies should you include in your design to meet these requirements? (Select TWO)
You are designing an Azure Sentinel architecture for a Managed Security Service Provider (MSSP).
The MSSP manages security for 15 different enterprise customers. Each customer has their own Azure Active Directory (Microsoft Entra ID) tenant and strict data residency requirements (some in the US, some in the EU). The MSSP's Security Operations Center (SOC) team needs to view and correlate incidents across all 15 customers from a single pane of glass.
Which TWO technologies should you include in your design to meet these requirements? (Select TWO)
Answer options:
Azure Lighthouse
Multiple Azure Sentinel workspaces (one per customer region/tenant)
A single centralized Azure Sentinel workspace in the MSSP tenant
Azure AD B2B Guest Accounts
Azure Data Factory
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 1
55 questions · hints · full answers · grading