To which service should you export the alerts?

You have an Azure subscription that has Azure Defender enabled for all supported resource types.

You need to configure the continuous export of high-severity alerts to enable their retrieval from a third-party security information and event management (SIEM) solution.

To which service should you export the alerts?
A . Azure Cosmos DB
B. Azure Event Grid
C. Azure Event Hubs
D. Azure Data Lake

View Answer

Answer: C

Explanation:

Reference: https://docsmicrosoftcom/en-us/azure/security-center/continuous-export?tabs=azure-portal