What should you do?

You have three on-premises servers named Server1, Server2, and Server3 that run Windows Server1 and Server2 and located on the Internal network. Server3 is located on the premises network. All servers have access to Azure.

From Azure Sentinel, you install a Windows firewall data connector.

You need to collect Microsoft Defender Firewall data from the servers for Azure Sentinel.

What should you do?
A . Create an event subscription from Server1, Server2 and Server3
B . Install the On-premises data gateway on each server.
C . Install the Microsoft Agent on each server.
D . Install the Microsoft Agent on Server1 and Server2 install the on-premises data gateway on Server3.

View Answer

Answer: B