HOTSPOT - You have an Azure Sentinel workspace that has the following data connectors: ✑ Azure Active Directory Identity Protection ✑ Common Event Format (CEF) Azure Firewall - 

You need to ensure that data is being ingested from each connector. From the Logs query window, which table should you query for each connector? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Hot Area: 

Reference: https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-ad-identity-protection https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-firewall https://docs.microsoft.com/en-us/azure/sentinel/connect-data-sources