You are a global administrator in a company with Microsoft 365 E5 licenses assigned to your users. You have onboarded Azure sentinel as a cloud based SIEM solution. Where are the audit logs of Azure Sentinel maintained? 

Answer options:

A.Azure Storage Account
B.Azure Activity Log 
C.Azure Key Vault
D.Azure Sentinel workbook

Correct Answer: B 
The Sentinel audit logs are maintained in Azure Activity Log. You can add a Data connector to stream the data from Activity log into Azure Sentinel in order to view and investigate it.

Option A is incorrect. Sentinel Audit Logs are not maintained in a storage account.
Option C is incorrect. Sentinel Audit Logs are not maintained in a key vault.
Option D is incorrect. Sentinel workbooks are used to visualize and monitor your data.
Reference: 
To know more about Azure sentinel audit logging, please refer to the link below: 

https://docs.microsoft.com/en-us/security/benchmark/azure/baselines/sentinel-security-baseline