Microsoft Exam SC-200 Topic 2 Question 48 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 48
Topic #: 2

You have a Microsoft Sentinel workspace named Workspace1 and 200 custom Advanced Security Information Model (ASIM) parsers based on the DNS schem

a. You need to make the 200 parsers available in Workspace1. The solution must minimize administrative effort. What should you do first?

ACopy the parsers to the Azure Monitor Logs page.

BCreate a JSON file based on the DNS template.

CCreate an XML file based on the DNS template.

DCreate a YAML file based on the DNS template.

Show Suggested Answer

Suggested Answer: D

by Laticia at Jan 07, 2023, 08:06 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

3 days ago

200 custom parsers? Wow, this person must be a real DNS wizard. I hope they don't have to debug all of those on a Friday night.

upvoted 0 times

...

9 days ago

YAML, huh? Looks like someone's been watching too many DevOps tutorials. Let's keep it simple and go with the JSON file.

upvoted 0 times

...

11 days ago

An XML file? Really? That's so 2000s. I'd go with the YAML file option, it's more modern and readable.

upvoted 0 times

...

20 days ago

Creating a JSON file based on the DNS template sounds like the right approach. It's a common format and should be easy to integrate.

upvoted 0 times

7 days ago

A) Copy the parsers to the Azure Monitor Logs page.

upvoted 0 times

...

1 months ago

I think we should copy the parsers to the Azure Monitor Logs page first.

upvoted 0 times

...