MENU
Your company uses Azure Sentinel to manage alerts from more than 10,000 IoT devices.
A security manager at the company reports that tracking security threats is increasingly difficult due to the large number of incidents.
You need to recommend a solution to provide a custom visualization to simplify the investigation of threats and to infer threats by using machine learning.
What should you include in the recommendation?
Suggested Answer: C
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://docs.microsoft.com/en-us/azure/sentinel/notebooks
30 comments · newest first
LA
Laquita
6 months ago
Notebooks really stand out for complex threat analysis.
IS
Isreal
7 months ago
Bookmarks (D) are useful, but they won't simplify investigations much.
MI
Mignon
7 months ago
Livestream (B) is good for real-time data, but not for deep analysis.
MA
Marsha
7 months ago
Built-in queries (A) might help, but they lack customization.
SC
Scarlet
7 months ago
I agree! Notebooks can integrate machine learning too.
QU
Quinn
7 months ago
I think option C, notebooks, is the best choice. They allow for custom visualizations.
EL
Elena
8 months ago
Bookmarks? I don’t see how that would simplify anything.
JO
Josphine
8 months ago
Wait, can machine learning really handle that many incidents?
MA
Maryrose
8 months ago
Livestream could make real-time monitoring easier.
RO
Roxanne
8 months ago
Not sure about that, notebooks seem more flexible.
CL
Clemencia
9 months ago
C) notebooks - Notebooks are the way to go! I heard they even have a feature where you can program your own AI assistant to do the investigating for you.
VA
Vallie
9 months ago
D) bookmarks - Bookmarks will help us quickly access and track the most important security incidents.
TI
Timothy
9 months ago
A) built-in queries - The built-in queries in Azure Sentinel should provide the necessary functionality to investigate threats.
KR
Kristel
9 months ago
Bookmarks seem less relevant for this scenario; I feel like we need something more interactive like notebooks or built-in queries.
TI
Timothy
9 months ago
Livestream sounds familiar, but I can't recall if it helps with threat inference or just monitoring in real-time.
ME
Merri
9 months ago
I think notebooks could be useful since they allow for custom visualizations and integrating machine learning, but I need to double-check that.
SH
Shonda
10 months ago
Livestream seems like it might not be the best fit here. I'm not sure how that would help simplify the investigation of threats.
CR
Craig
10 months ago
Notebooks could be really helpful for building custom visualizations and integrating machine learning. I'd want to explore that option further.
CA
Carman
10 months ago
C) notebooks - This will allow us to leverage machine learning and custom visualizations to simplify the investigation process.
JE
Jerrod
10 months ago
I think built-in queries would help a lot!
CA
Candida
10 months ago
I remember we discussed built-in queries in class, but I'm not sure if they provide the custom visualization we need.
EL
Eliz
11 months ago
B) livestream - A livestream of the IoT device activity would give us real-time visibility into the threats.
JO
Johanna
11 months ago
Bookmarks could be useful for organizing and quickly accessing the most important visualizations, but I don't think that alone would solve the problem.
AL
Alberta
11 months ago
Hmm, I'm not sure about the machine learning part. I'd need to look into how to set that up and what kind of models would work best for this use case.
TA
Tambra
11 months ago
I think I'd start by looking at the built-in queries in Azure Sentinel. That might give me some ideas for how to customize the visualization.
LO
Lorrie
6 months ago
Livestream could provide real-time insights too!
AN
Annabelle
6 months ago
True, but I think bookmarks might help with quick access.
KR
Krystal
6 months ago
Notebooks could also be useful for deeper analysis.
JO
Johna
6 months ago
I agree! They can help filter out noise.
RU
Ruthann
6 months ago
Built-in queries sound like a solid starting point.