Microsoft Exam SC-200 Topic 1 Question 23 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 23
Topic #: 1

You create a hunting query in Azure Sentinel.

You need to receive a notification in the Azure portal as soon as the hunting query detects a match on the query. The solution must minimize effort.

What should you use?

Aa playbook

Ba notebook

Ca livestream

Da bookmark

Show Suggested Answer

Suggested Answer: C

Use livestream to run a specific query constantly, presenting results as they come in.

by Peggie at May 07, 2022, 09:38 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!