Microsoft SC-200 Exam - Topic 4 Question 101 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 101
Topic #: 4

Your company uses Azure Sentinel to manage alerts from more than 10,000 IoT devices.

A security manager at the company reports that tracking security threats is increasingly difficult due to the large number of incidents.

You need to recommend a solution to provide a custom visualization to simplify the investigation of threats and to infer threats by using machine learning.

What should you include in the recommendation?

Abuilt-in queries

Blivestream

Cnotebooks

Dbookmarks

Show Suggested Answer

Suggested Answer: C

https://docs.microsoft.com/en-us/azure/sentinel/notebooks

by Karrie at Nov 21, 2025, 02:02 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Laquita

2 months ago

Notebooks really stand out for complex threat analysis.

upvoted 0 times

...

Isreal

2 months ago

Bookmarks (D) are useful, but they won't simplify investigations much.

upvoted 0 times

...

Mignon

2 months ago

Livestream (B) is good for real-time data, but not for deep analysis.

upvoted 0 times

...

Marsha

3 months ago

Built-in queries (A) might help, but they lack customization.

upvoted 0 times

...

Scarlet

3 months ago

I agree! Notebooks can integrate machine learning too.

upvoted 0 times

...

Quinn

3 months ago

I think option C, notebooks, is the best choice. They allow for custom visualizations.

upvoted 0 times

...

Elena

4 months ago

Bookmarks? I don’t see how that would simplify anything.

upvoted 0 times

...

Josphine

4 months ago

Wait, can machine learning really handle that many incidents?

upvoted 0 times

...

Maryrose

4 months ago

Livestream could make real-time monitoring easier.

upvoted 0 times

...

Roxanne

4 months ago

Not sure about that, notebooks seem more flexible.

upvoted 0 times

...

Clemencia

4 months ago

C) notebooks - Notebooks are the way to go! I heard they even have a feature where you can program your own AI assistant to do the investigating for you.

upvoted 0 times

...

Vallie

4 months ago

D) bookmarks - Bookmarks will help us quickly access and track the most important security incidents.

upvoted 0 times

...

Timothy

5 months ago

A) built-in queries - The built-in queries in Azure Sentinel should provide the necessary functionality to investigate threats.

upvoted 0 times

...

Kristel

5 months ago

Bookmarks seem less relevant for this scenario; I feel like we need something more interactive like notebooks or built-in queries.

upvoted 0 times

...

Timothy

5 months ago

Livestream sounds familiar, but I can't recall if it helps with threat inference or just monitoring in real-time.

upvoted 0 times

...

Merri

5 months ago

I think notebooks could be useful since they allow for custom visualizations and integrating machine learning, but I need to double-check that.

upvoted 0 times

...

Shonda

5 months ago

Livestream seems like it might not be the best fit here. I'm not sure how that would help simplify the investigation of threats.

upvoted 0 times

...

Craig

5 months ago

Notebooks could be really helpful for building custom visualizations and integrating machine learning. I'd want to explore that option further.

upvoted 0 times

...

Carman

6 months ago

C) notebooks - This will allow us to leverage machine learning and custom visualizations to simplify the investigation process.

upvoted 0 times

...

Jerrod

6 months ago

I think built-in queries would help a lot!

upvoted 0 times

...

Candida

6 months ago

I remember we discussed built-in queries in class, but I'm not sure if they provide the custom visualization we need.

upvoted 0 times

...

Eliz

6 months ago

B) livestream - A livestream of the IoT device activity would give us real-time visibility into the threats.

upvoted 0 times

...

Johanna

7 months ago

Bookmarks could be useful for organizing and quickly accessing the most important visualizations, but I don't think that alone would solve the problem.

upvoted 0 times

...

Alberta

7 months ago

Hmm, I'm not sure about the machine learning part. I'd need to look into how to set that up and what kind of models would work best for this use case.

upvoted 0 times

...