Which two configurations should you include in the recommendation?

You are planning the security requirements for Azure Cosmos DB Core (SQL) API accounts. You need

to recommend a solution to audit all users that access the data in the Azure Cosmos DB accounts.

Which two configurations should you include in the recommendation? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
A . Enable Microsoft Defender for Cosmos DB.
B . Send the Azure Active Directory (Azure AD) sign-in logs to a Log Analytics workspace.
C . Disable local authentication for Azure Cosmos DB.
D . Enable Microsoft Defender for Identity.
E . Send the Azure Cosmos DB logs to a Log Analytics workspace.

View Answer

Answer: B, C

Explanation:

https://docs.microsoft.com/en-us/azure/cosmos-db/audit-control-plane-logs