New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft SC-200 Exam - Topic 4 Question 101 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 101
Topic #: 4
[All SC-200 Questions]

Your company uses Azure Sentinel to manage alerts from more than 10,000 IoT devices.

A security manager at the company reports that tracking security threats is increasingly difficult due to the large number of incidents.

You need to recommend a solution to provide a custom visualization to simplify the investigation of threats and to infer threats by using machine learning.

What should you include in the recommendation?

Show Suggested Answer Hide Answer
Suggested Answer: C

https://docs.microsoft.com/en-us/azure/sentinel/notebooks

Contribute your Thoughts:

0/2000 characters
Elena
17 days ago
Bookmarks? I don’t see how that would simplify anything.
upvoted 0 times
...
Josphine
22 days ago
Wait, can machine learning really handle that many incidents?
upvoted 0 times
...
Maryrose
27 days ago
Livestream could make real-time monitoring easier.
upvoted 0 times
...
Roxanne
1 month ago
Not sure about that, notebooks seem more flexible.
upvoted 0 times
...
Clemencia
1 month ago
C) notebooks - Notebooks are the way to go! I heard they even have a feature where you can program your own AI assistant to do the investigating for you.
upvoted 0 times
...
Vallie
1 month ago
D) bookmarks - Bookmarks will help us quickly access and track the most important security incidents.
upvoted 0 times
...
Timothy
2 months ago
A) built-in queries - The built-in queries in Azure Sentinel should provide the necessary functionality to investigate threats.
upvoted 0 times
...
Kristel
2 months ago
Bookmarks seem less relevant for this scenario; I feel like we need something more interactive like notebooks or built-in queries.
upvoted 0 times
...
Timothy
2 months ago
Livestream sounds familiar, but I can't recall if it helps with threat inference or just monitoring in real-time.
upvoted 0 times
...
Merri
2 months ago
I think notebooks could be useful since they allow for custom visualizations and integrating machine learning, but I need to double-check that.
upvoted 0 times
...
Shonda
2 months ago
Livestream seems like it might not be the best fit here. I'm not sure how that would help simplify the investigation of threats.
upvoted 0 times
...
Craig
2 months ago
Notebooks could be really helpful for building custom visualizations and integrating machine learning. I'd want to explore that option further.
upvoted 0 times
...
Carman
3 months ago
C) notebooks - This will allow us to leverage machine learning and custom visualizations to simplify the investigation process.
upvoted 0 times
...
Jerrod
3 months ago
I think built-in queries would help a lot!
upvoted 0 times
...
Candida
3 months ago
I remember we discussed built-in queries in class, but I'm not sure if they provide the custom visualization we need.
upvoted 0 times
...
Eliz
3 months ago
B) livestream - A livestream of the IoT device activity would give us real-time visibility into the threats.
upvoted 0 times
...
Johanna
3 months ago
Bookmarks could be useful for organizing and quickly accessing the most important visualizations, but I don't think that alone would solve the problem.
upvoted 0 times
...
Alberta
4 months ago
Hmm, I'm not sure about the machine learning part. I'd need to look into how to set that up and what kind of models would work best for this use case.
upvoted 0 times
...
Tambra
4 months ago
I think I'd start by looking at the built-in queries in Azure Sentinel. That might give me some ideas for how to customize the visualization.
upvoted 0 times
...

Save Cancel