exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Exam SC-200 topic 3 question 61 discussion

Actual exam question from Microsoft's SC-200
Question #: 61
Topic #: 3
[All SC-200 Questions]

You have a custom Microsoft Sentinel workbook named Workbook1.

You need to add a grid to Workbook1. The solution must ensure that the grid contains a maximum of 100 rows.

What should you do?

  • A. In the grid query, include the take operator.
  • B. In the grid query, include the project operator.
  • C. In the query editor interface, configure Settings.
  • D. In the query editor interface, select Advanced Editor.
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
eddz25
Highly Voted 2 years, 4 months ago
Selected Answer: A
A. In the grid query, include the take operator. The take operator allows you to limit the number of rows returned by a query. By including the take operator in the grid query and specifying a maximum of 100 rows, you can ensure that the grid in Workbook1 contains a maximum of 100 rows. For example, you could use the following query: | take 100
upvoted 22 times
prino
2 years, 4 months ago
https://learn.microsoft.com/en-us/azure/data-explorer/kusto/query/takeoperator
upvoted 5 times
...
...
sebas12345
Highly Voted 11 months, 2 weeks ago
Why do I pay for this, if they can't even refresh the correct answers... even after 1 year of the correct answer being in the discussion...
upvoted 9 times
...
VeiN
Most Recent 7 months, 2 weeks ago
Selected Answer: D
You can do it like in A and D. Also worth mentioning that you can set up row Limit by "Advanced Settings" not needing to modify json in "Advanced Editor". So what is the difference between A & D ? When you set up by ADV Editor: "gridSettings": { "rowLimit": 100 } You will see an info on the bottom of the grid that the result was limitied to 100 results. If you modify the query you won`t see it therfore it`s far more less practical to use. Remember that when using runbook you won`t see the query without specifically edit it.
upvoted 1 times
...
estyj
1 year, 5 months ago
A. Take operator: returns up to the specified number of rows.
upvoted 1 times
...
chepeerick
1 year, 7 months ago
Correct Option
upvoted 1 times
...
chepeerick
1 year, 7 months ago
the option is D:
upvoted 1 times
...
RV025
1 year, 9 months ago
Selected Answer: D
D The take operator will always return 100 rows.
upvoted 1 times
Durden871
1 year, 2 months ago
So, why did you select D...?
upvoted 2 times
...
...
JoeP1
1 year, 10 months ago
Selected Answer: A
Since a grid in a Sentinel workbook is based on a query, the size of the grid can be set by limiting the number of query results using the take parameter(Answer A).
upvoted 2 times
...
[Removed]
2 years, 2 months ago
Selected Answer: A
A. In the grid query, include the take operator. By including the take operator in the grid query, we can limit the number of rows displayed to a maximum of 100. The take operator allows us to specify the number of rows to retrieve from the data source.
upvoted 2 times
...
interwor
2 years, 4 months ago
Selected Answer: D
D. "By default, grids only display the first 250 rows of data. This setting can be changed in the query component's advanced settings to display up to 10,000 rows. Any further items are ignored, and a warning appears." https://learn.microsoft.com/en-us/azure/azure-monitor/visualize/workbooks-limits
upvoted 2 times
yoton
2 years, 4 months ago
They only want 100. You need to limit the rows not go up.
upvoted 4 times
whiteRabbit1984
1 year, 10 months ago
"Up to 10.000 rows" means <= 10.000 rows, therefore you can probably reduce the number of rows too
upvoted 1 times
...
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...