Microsoft Defender for Cloud has generated an alert titled 'Jailbreak attempt detected on Azure OpenAI model deployment.' A security engineer needs to investigate this alert. Which data source contains the full prompt content that triggered the alert?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Here's the deal — b is correct because Azure OpenAI Service supports sending diagnostic logs to a Log Analytics workspace. The 'RequestResponse' diagnostic category captures the actual API request and response content, including the prompts sent to the model.
Full explanation below image
Full Explanation
B is correct because Azure OpenAI Service supports sending diagnostic logs to a Log Analytics workspace. The 'RequestResponse' diagnostic category captures the actual API request and response content, including the prompts sent to the model. When Defender for Cloud detects a jailbreak attempt, the full prompt context for investigation is found in the RequestResponse diagnostic logs. A is wrong because Azure Monitor Activity Log captures control plane operations (management API calls like resource creation), not data plane inference requests. C is wrong because Defender for Endpoint Advanced Hunting contains endpoint telemetry (process events, file writes, network connections), not Azure OpenAI API request content. D is wrong because Entra ID Audit Logs capture identity and access management operations, not AI model inference request content.