Exam SC-200 topic 3 question 51 discussion

To create a custom report that will visualize sign-in information over time in Microsoft Sentinel, you should create a workbook first. A workbook is a tool that allows you to create interactive reports and dashboards using data from Microsoft Sentinel. You can use existing workbook templates or create your own from scratch. A hunting query is a KQL query that you can use to search for threats and anomalies in your data. A notebook is a tool that allows you to run Python code and visualize data using Azure Notebooks. A playbook is a tool that allows you to automate responses to alerts using Azure Logic Apps.

ChatGTP: ✅ Correct answer: B. a workbook 🧾 Explanation: To visualize sign-in information over time in Microsoft Sentinel, you should start with a: 👉 Workbook Workbooks in Sentinel are powerful reporting tools that allow you to build custom dashboards and visualizations using KQL queries. You can graph sign-ins over time, apply filters (like users, locations, or risk levels), and build interactive views.

you could do it with a notebook also, right?

Correct

https://learn.microsoft.com/en-us/azure/sentinel/monitor-your-data

B. a workbook. A Workbook is a collection of visualizations and data that can be used to analyze and report on data in Azure Sentinel. It can be used to create custom reports that visualize sign-in information over time.