Skip to main content
Answer needs confirmation
Preamble

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

Question

You have an on-premises server named Server1 that runs Windows Server.

You have a Microsoft Sentinel instance.

You add the Windows Firewall data connector in Microsoft Sentinel.

You need to ensure that Microsoft Sentinel can collect Windows Firewall logs from Server1.

Solution: You onboard Server1 to Microsoft Defender for Endpoint.

Does this meet the goal?

Proposed answer
  • A. Yes
  • B. No
Suggested answer

B. No

Comments
004b54b

2 months, 2 weeks ago 

Selected Answer: B

https://learn.microsoft.com/en-us/defender-endpoint/microsoft-defender-endpoint No mention to firewall logs or anything close, so B. No

upvoted 1 times