Microsoft SC-200 Exam - Topic 1 Question 50 Discussion
You have an Azure subscription that uses Microsoft Sentinel.You need to create a custom report that will visualise sign-in information over time.What should you create first?
A) a workbook
B) a hunting query
C) a notebook
D) a playbook
Microsoft SC-200 Exam - Topic 1 Question 50 Discussion
Playbooks seem more related to automation tasks. I don’t think that’s what we need here, but I’m confused about the difference between workbooks and hunting queries.
Hmm, I'm a bit unsure about this one. I know Azure Blob is for unstructured data, but I'm not sure if that's considered a key/value model. I'll have to think this through a bit more.
Rolf
7 months agoHayley
7 months agoEdgar
7 months agoAvery
8 months agoShawnda
8 months agoGeraldine
8 months agoCaitlin
8 months agoVenita
8 months agoRaelene
8 months agoFelicidad
8 months agoCarlota
8 months agoThora
8 months agoLourdes
8 months ago