CNX-001: CompTIA CloudNetX

A SIEM centralizes log data from multiple environments and sources, correlates that data to detect threats or operational issues, and supports automated alerting through rules. Microsoft’s guidance describes using centralized log aggregation for cross-service correlation and configuring alert rules from aggregated multi-source logs.