Reference:
https://docs.microsoft.com/en-us/azure/sentinel/overview

Explanation
Graphical user interface, text Description automatically generated with medium confidence

Explanation
A screenshot of a computer Description automatically generated with low confidence

You can use an Azure network security group to filter network traffic to and from Azure resources in an Azure virtual network. A network security group contains security rules that allow or deny inbound network traffic to, or outbound network traffic from, several types of Azure resources. For each rule, you can specify source and destination, port, and protocol.

Reference:
https://docs.microsoft.com/en-us/microsoft-365/compliance/advanced-audit?view=o365-worldwide
https://docs.microsoft.com/en-us/microsoft-365/compliance/auditing-solutions-overview?view=o365- worldwide#licensing-requirements
https://docs.microsoft.com/en-us/office365/servicedescriptions/microsoft-365-service-descriptions/microsoft- 365-tenantlevel-services-licensing-guidance/microsoft-365-security-compliance-licensing-guidance#advanced- audit