How can you transform data before it is ingested into Azure Sentinel?

Answer options:

A.Both Azure Functions and Logstash
B.Azure Function
C.Logstash
D.UEBA

Correct Answer: A
Option A is correct. Using both Azure Functions and Logstash, we can connect Azure Sentinel to your data source.
Option B and C are incorrect. Both Azure Functions and Logstash connect Azure Sentinel to your data source. B & C contains only one of them each.
Option D is incorrect. UEBA is one of the features present once enabled inside the Azure Sentinel.
References: 

https://docs.microsoft.com/en-us/azure/sentinel/connect-azure-functions-template?tabs=ARM
https://docs.microsoft.com/en-us/azure/sentinel/connect-logstash