ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 4 question 7 discussion

Actual exam question from Microsoft's SC-200
Question #: 7
Topic #: 4
[All SC-200 Questions]

You have a Microsoft Sentinel workspace that contains a custom workbook named Workbook1.

You need to create a visual based on the SecurityEvent table. The solution must meet the following requirements:

• Identify the number of security events ingested during the past week.
• Display the count of events by day in a timechart.

What should you add to Workbook1?

  • A. a query
  • B. a metric
  • C. a group
  • D. links or tabs
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by ServerBrain at April 26, 2024, 5:40 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
ServerBrain
Highly Voted 1 year ago
Selected Answer: A
A query allows you to retrieve specific data from the SecurityEvent table. You can write a query that filters events based on the past week’s timestamp and aggregates the count of events by day. The timechart visualization will display this aggregated data over time, showing the event count trends.
upvoted 10 times
rsanx42
11 months, 1 week ago
Agreed, its A.
upvoted 1 times
...
...
smanzana
Most Recent 9 months, 1 week ago
A is correct
upvoted 1 times
...
RedZtopics
1 year ago
query seems to be correct
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago