MENU
You need to ensure that the configuration of HuntingQuery1 meets the Microsoft Sentinel requirements.
What should you do?
Suggested Answer: D
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
JE
Jeannetta
3 months ago
Option C seems useful too. Automation can streamline the process.
GW
Gwenn
3 months ago
I’m leaning towards B. A watch list can help track specific threats.
FR
Franklyn
3 months ago
I think option A is the best. Livestreams are crucial for real-time monitoring.
RO
Rosita
4 months ago
C) Creating an Azure Automation rule is definitely overkill for this.
AU
Audrie
4 months ago
Wait, can you really just add it to a livestream? That sounds too easy!
AL
Alpha
4 months ago
Not sure about D) Adding to favorites, seems pointless.
CA
Carin
5 months ago
I think B) Create a watch list could also work.
VI
Vinnie
6 months ago
A) Add HuntingQuery1 to a livestream is the way to go!
MA
Maira
6 months ago
Adding to favorites seems too simple; I doubt that's what they want us to do for compliance with Sentinel requirements.
AI
Aileen
7 months ago
I feel like creating an Azure Automation rule might be overkill for just a hunting query, but I could be mistaken.
FR
Francoise
7 months ago
I remember practicing a question about watch lists, but I can't recall if they are directly related to HuntingQuery1.
DE
Dell
7 months ago
I think adding HuntingQuery1 to a livestream could be the right move, but I'm not entirely sure if that's the only requirement we need to meet.