MENU
You have a Microsoft Sentinel workspace named Workspace1 and 200 custom Advanced Security Information Model (ASIM) parsers based on the DNS schem
a. You need to make the 200 parsers available in Workspace1. The solution must minimize administrative effort. What should you do first?
Suggested Answer: D
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
40 comments · newest first
JO
Jolanda
11 months ago
Why not just copy them directly? Sounds easier!
NY
Nydia
11 months ago
I agree, JSON is more standard for these parsers.
SU
Sue
12 months ago
Wait, can you really use YAML for this? Seems odd.
FA
Fannie
12 months ago
I think option A might work too, but not sure if it's the best.
MI
Mike
1 year ago
Definitely go with option B, JSON is the way to go!
KA
Karol
1 year ago
YAML seems like a newer format we discussed, but I’m not sure if it applies to this scenario. I might lean towards JSON based on what I remember.
ER
Erasmo
1 year ago
I feel like XML was mentioned in one of our study sessions, but I’m not confident it’s the best option here.
ST
Stanton
1 year ago
I think we practiced a similar question where we had to create a file based on a template. It might have been JSON too, but I can't recall the specifics.
AL
Alease
1 year ago
I remember something about using JSON files for configurations, but I'm not entirely sure if that's the right approach for parsers.
AN
Antione
1 year ago
Hmm, I'm a bit unsure about this one. I know backlog prioritization is important, but I'm not sure if I fully understand all the elements they're looking for here. I'll have to think it through carefully.
MA
Malinda
1 year ago
I remember it being related to high importance, but I can't recall if it's high complexity or low risk. This is tricky!
MA
Malcom
1 year ago
I've got this! The key is to identify the root bridge and then select the ports with the lowest path cost to that root bridge. I'll carefully evaluate each option.
FR
Frank
1 year ago
200 custom parsers? Wow, this person must be a real DNS wizard. I hope they don't have to debug all of those on a Friday night.
OZ
Ozell
1 year ago
C) Create an XML file based on the DNS template.
KE
Kenda
1 year ago
B) Create a JSON file based on the DNS template.
GE
Georgeanna
1 year ago
A) Copy the parsers to the Azure Monitor Logs page.
KR
Krystal
1 year ago
YAML, huh? Looks like someone's been watching too many DevOps tutorials. Let's keep it simple and go with the JSON file.
CL
Clement
1 year ago
User3: Good idea, JSON is easier to work with.
FI
Fidelia
1 year ago
User2: Agreed, let's stick with the JSON file.
LI
Lilli
1 year ago
User1: YAML does seem a bit complex.
LA
Lashon
1 year ago
An XML file? Really? That's so 2000s. I'd go with the YAML file option, it's more modern and readable.
CA
Caprice
1 year ago
Creating a JSON file based on the DNS template sounds like the right approach. It's a common format and should be easy to integrate.
NI
Nilsa
1 year ago
D) Create a YAML file based on the DNS template.
LE
Lenna
1 year ago
C) Create an XML file based on the DNS template.
JU
Juan
1 year ago
B) Create a JSON file based on the DNS template.
LE
Leoma
1 year ago
A) Copy the parsers to the Azure Monitor Logs page.
VI
Vi
1 year ago
D) Create a YAML file based on the DNS template.
PH
Phuong
1 year ago
C) Create an XML file based on the DNS template.
SH
Shonda
1 year ago
B) Create a JSON file based on the DNS template.
AA
Aaron
1 year ago
A) Copy the parsers to the Azure Monitor Logs page.
IR
Irene
2 years ago
I think copying the parsers to the Azure Monitor Logs page is the way to go. It seems like the easiest option to make them available in Workspace1.
VE
Veda
1 year ago
D) Create a YAML file based on the DNS template.
DE
Delmy
1 year ago
C) Create an XML file based on the DNS template.
AN
Antonette
1 year ago
B) Create a JSON file based on the DNS template.
HE
Hector
1 year ago
A) Copy the parsers to the Azure Monitor Logs page.
LA
Layla
1 year ago
B) Create a JSON file based on the DNS template.
CH
Charlena
1 year ago
A) Copy the parsers to the Azure Monitor Logs page.
MA
Marguerita
2 years ago
I'm not sure, but creating a JSON file based on the DNS template could also work. It might be worth considering.
TO
Tom
2 years ago
I agree with Margery. It seems like the most efficient option to minimize administrative effort.
MA
Margery
2 years ago
I think we should copy the parsers to the Azure Monitor Logs page first.