Microsoft SC-200 Exam - Topic 1 Question 50 Discussion
You have an Azure subscription that uses Microsoft Sentinel.You need to create a custom report that will visualise sign-in information over time.What should you create first?
A) a workbook
B) a hunting query
C) a notebook
D) a playbook
Microsoft SC-200 Exam - Topic 1 Question 50 Discussion
Playbooks seem more related to automation tasks. I don’t think that’s what we need here, but I’m confused about the difference between workbooks and hunting queries.
Hmm, I'm a bit unsure about this one. I know Azure Blob is for unstructured data, but I'm not sure if that's considered a key/value model. I'll have to think this through a bit more.
Rolf
10 months agoHayley
10 months agoEdgar
10 months agoAvery
10 months agoShawnda
10 months agoGeraldine
11 months agoCaitlin
11 months agoVenita
11 months agoRaelene
11 months agoFelicidad
11 months agoCarlota
11 months agoThora
11 months agoLourdes
11 months ago