Question 5 of 9

You have a Microsoft 365 tenant with a Microsoft Sentinel workspace.

You've been asked by your manager to configure Microsoft 365 so you can manage incidents based on alerts generated by Microsoft Cloud App Security.

What do you need to do first?

If you need to manage incidents based on alerts generated by Microsoft Cloud App Security we'll need to create a security extension in Microsoft Defender for the Cloud Apps admin center.

https://www.gitbit.org/course/ms-500/learn/Collect-detect-investigate-and-respond-to-security-threats-using-Microsoft-Sentinel-LEyZMWBSt

https://docs.microsoft.com/en-us/cloud-app-security/siem-sentinel