Knowledge check

Completed

Choose the best response for each of the questions below.

Check your knowledge

1.

Which table stores Defender for Endpoint logon events?

DeviceLogonEvents

OfficeActivity

SigninLogs

2.

What table contains logs from Windows hosts collected directly to Microsoft Sentinel?

SecurityEvent

AuditLogs

SecurityAlert

3.

Which table stores Alerts from Microsoft Defender for Endpoint?

SecurityIncident

DeviceEvents

SecurityAlert

You must answer all questions before checking your work.