
Ultimate access to all questions.
Your organization is planning to enhance its security posture by implementing a comprehensive threat detection and response strategy across the enterprise. The strategy must integrate seamlessly with existing Azure services and third-party tools, provide scalable analytics for threat detection, and offer automation capabilities for efficient response. Considering cost-effectiveness, compliance requirements, and the need for minimal manual intervention, which of the following approaches BEST meets these requirements? (Choose two options if option E is available.)
A
Ignore Azure Sentinel and rely on individual security tools for monitoring, which may lead to fragmented visibility and increased manual effort.
B
Deploy Azure Sentinel to aggregate and analyze data from Azure services and third-party tools, leveraging its built-in AI for threat detection and automation for response, ensuring a unified and efficient security operation.
C
Manually collect and review logs from each security tool daily, which is time-consuming and may not scale with the organization's growth.
D
Outsource all threat detection and response activities to a third-party vendor, which may not provide the desired integration with Azure services and could be cost-prohibitive.
E
Implement a combination of Azure Sentinel for integrated threat detection and response and a third-party vendor for specialized security assessments, ensuring comprehensive coverage.