Discuss Microsoft SC-200 Exam Topic 1 Question 50

You have an Azure subscription that uses Microsoft Sentinel.

You need to create a custom report that will visualise sign-in information over time.

What should you create first?

Aa workbook

Ba hunting query

Ca notebook

Da playbook

Suggested Answer: A

A workbook is a data-driven interactive report in Microsoft Sentinel. You can use workbooks to create custom reports based on data from your Azure subscription. Reference: https://docs.microsoft.com/en-us/azure/sentinel/workbooks-overview

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Rolf 11 months ago

I’m surprised it’s not a playbook!

Hayley 11 months ago

Wait, can you really visualize sign-ins with just a workbook?

Edgar 12 months ago

I thought a hunting query would be the first step?

Avery 12 months ago

Totally agree, workbooks are the way to go!

Shawnda 1 year ago

You need to create a workbook first.

Geraldine 1 year ago

Playbooks seem more related to automation tasks. I don’t think that’s what we need here, but I’m confused about the difference between workbooks and hunting queries.

Caitlin 1 year ago

I feel like notebooks are more for data analysis and not specifically for reports. So, I’m leaning towards a workbook too.

Venita 1 year ago

I’m not entirely sure, but I remember something about hunting queries being used for analyzing data. Could that be the first step?

Raelene 1 year ago

I think we might need to create a workbook first since it’s often used for visualizing data in Azure.

Felicidad 1 year ago

Hmm, I'm a bit unsure about this one. I know Azure Blob is for unstructured data, but I'm not sure if that's considered a key/value model. I'll have to think this through a bit more.

Carlota 1 year ago

Okay, I remember learning about this in class. The process of converting present value to future value is called compounding, so I'll select option B.

Thora 1 year ago

Value Tree sounds like it could be a good fit, but I want to double-check the other choices to make sure I don't miss something important.

Lourdes 1 year ago

This question seems straightforward, I think I can handle it.

Microsoft SC-200 Exam - Topic 1 Question 50 Discussion