Microsoft SC-200 Exam - Topic 3 Question 41 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 41
Topic #: 3

You have a Microsoft Sentinel workspace named workspace1 that contains custom Kusto queries.

You need to create a Python-based Jupyter notebook that will create visuals. The visuals will display the results of the queries and be pinned to a dashboard. The solution must minimize development effort.

What should you use to create the visuals?

Aplotly

BTensorFlow

Cmsticpy

Dmatplotlib

Show Suggested Answer

Suggested Answer: C

msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources. enrich the data with Threat Intelligence, geolocations and Azure resource data. extract Indicators of Activity (IoA) from logs and unpack encoded data.

MSTICPy reduces the amount of code that customers need to write for Microsoft Sentinel, and provides:

Data query capabilities, against Microsoft Sentinel tables, Microsoft Defender for Endpoint, Splunk, and other data sources.

Threat intelligence lookups with TI providers, such as VirusTotal and AlienVault OTX.

Enrichment functions like geolocation of IP addresses, Indicator of Compromise (IoC) extraction, and WhoIs lookups.

Visualization tools using event timelines, process trees, and geo mapping.

Advanced analyses, such as time series decomposition, anomaly detection, and clustering.

https://docs.microsoft.com/en-us/azure/sentinel/notebook-get-started

https://msticpy.readthedocs.io/en/latest/

by Glendora at Aug 18, 2022, 09:03 AM

Limited Time Offer

25%

5 months ago

Ah, I remember learning about this in class. The Limits class is the one that has methods to get the current usage of various governor limits, including DML statements. I'm confident that's the right answer.

upvoted 0 times

...