exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 3 question 95 discussion

Actual exam question from Microsoft's SC-200
Question #: 95
Topic #: 3
[All SC-200 Questions]

You have 50 Microsoft Sentinel workspaces.

You need to view all the incidents from all the workspaces on a single page in the Azure portal. The solution must minimize administrative effort.

Which page should you use in the Azure portal?

  • A. Microsoft Sentinel - Incidents
  • B. Microsoft Sentinel - Workbooks
  • C. Microsoft Sentinel
  • D. Log Analytics workspaces
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
ceejay12
Highly Voted 1 year, 8 months ago
Selected Answer: A
Correct answer is A) Microsoft Sentinel | Incidents, which allows you to view all incidents from all LA workspaces.
upvoted 12 times
ceejay12
1 year, 8 months ago
Sentinel* workspaces.
upvoted 2 times
...
...
NeoTactics
Highly Voted 1 year, 6 months ago
Selected Answer: C
All answers are kind of strange, but I would go with "C", because you need to select multiple workspaces and then click on "View Incidents". This all happens on the entry portal page to Microsoft Sentinel. So it is "C"
upvoted 10 times
CDR
6 months ago
The "Microsoft Sentinel" page in the Azure portal provides a centralized view across all your Sentinel workspaces within a given Azure tenant. This includes the ability to view incidents from all workspaces on a single page using the Incidents view within the main Sentinel landing page. This is specifically designed for cross-workspace management and minimizes administrative effort.
upvoted 2 times
...
...
D231
Most Recent 5 months, 1 week ago
Official documentation about the right answer which is MS Sentinel- Incidents https://learn.microsoft.com/en-us/azure/sentinel/extend-sentinel-across-workspaces-tenants#manage-incidents-on-multiple-workspaces
upvoted 1 times
...
Ramye
1 year, 3 months ago
Selected Answer: A
Entering multiple workspace view When you open Microsoft Sentinel, you are presented with a list of all the workspaces to which you have access rights, across all selected tenants and subscriptions. To the left of each workspace name is a checkbox. Selecting the name of a single workspace will bring you into that workspace. To choose multiple workspaces, select all the corresponding checkboxes, and then select the View incidents button at the top of the page. https://learn.microsoft.com/en-us/azure/sentinel/multiple-workspace-view#entering-multiple-workspace-view
upvoted 3 times
...
estyj
1 year, 3 months ago
A. MS Sentinel | incidents select all your workspaces to view all the incidents.
upvoted 1 times
...
kazaki
1 year, 4 months ago
Selected Answer: A
https://learn.microsoft.com/en-us/azure/sentinel/multiple-workspace-view#entering-multiple-workspace-view
upvoted 1 times
...
JESSIE0X0X
1 year, 6 months ago
Selected Answer: D
def the answer is D, i checked on with all material and labs
upvoted 1 times
...
chepeerick
1 year, 7 months ago
Option A Incidents
upvoted 2 times
...
chepeerick
1 year, 7 months ago
Selected Answer: A
Should be A
upvoted 4 times
...
jr_cyber
1 year, 8 months ago
Answer should be A- "When you open Microsoft Sentinel, you are presented with a list of all the workspaces to which you have access rights, across all selected tenants and subscriptions. To the left of each workspace name is a checkbox. Selecting the name of a single workspace will bring you into that workspace. To choose multiple workspaces, select all the corresponding checkboxes, and then select the View incidents button at the top of the page." Ref: https://learn.microsoft.com/en-us/azure/sentinel/multiple-workspace-view
upvoted 4 times
Tuitor01
6 months, 3 weeks ago
Yeah, it' tricky I know, but think about it the question is: Which page should you use to see all the incidents for all the workspaces on a single page. In this case it's the Sentinel - Incident page since the Sentinel page only allows you to select the desired workspaces but doesn't show you the actual incidents.
upvoted 2 times
...
...
Rubes
1 year, 8 months ago
Selected Answer: D
It's D, you need to select the workspaces first https://learn.microsoft.com/en-us/azure/sentinel/multiple-workspace-view
upvoted 2 times
DCT
1 year, 5 months ago
Should be A according to the link provided.
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...