You create a new Azure subscription. To be able to create custom alert rules in Azure Security Center, which two actions must you perform?

To create custom alert rules in Azure Security Center (now Microsoft Defender for Cloud), you need to enable the Standard tier. The Free tier offers basic security posture management but lacks advanced threat detection features, including custom alert rules. The Standard tier (or any of the Defender plans) provides enhanced security capabilities, including access to custom alert rule creation. Additionally, custom alert rules in Defender for Cloud often rely on data collected and analyzed in an Azure Log Analytics workspace. This workspace acts as a central repository for logs and metrics, which are then queried and evaluated by the custom alert rules to identify potential threats. Onboarding Azure AD Identity Protection is a separate security service, and creating an Azure Storage account or implementing Azure Advisor recommendations are not direct prerequisites for creating custom alert rules.