Microsoft Exam SC-200 Topic 6 Question 60 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 60
Topic #: 6

You have a Microsoft 365 E5 subscription that uses Microsoft Defender for Endpoint

You need to create a query that will link the Alertlnfo, AlertEvidence, and DeviceLogonEvents tables. The solution must return all the rows in the tables.

Which operator should you use?

Ajoin kind = inner

Bevaluate hint. Remote =

Csearch *

Dunion kind = inner

Show Suggested Answer

Suggested Answer: A

by Rolland at Oct 19, 2023, 07:36 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Lauran

10 months ago

Hey, guys, I think Lili and 2 have it right. The inner join is definitely the way to go here. Although, I have to admit, the 'evaluate hint. Remote =' option is kind of intriguing. It's like a hidden gem, you know? Maybe we should keep that one in our back pocket, just in case.

upvoted 0 times

...

Filiberto

10 months ago

Ooh, this is a good one! I was leaning towards option D, 'union kind = inner', but now I'm not so sure. The 'join kind = inner' makes more sense. Although, I do have a soft spot for the 'search *' option - it's got a certain je ne sais quoi, you know?

upvoted 0 times

...

Elin

10 months ago

I agree with Lili. The 'join kind = inner' option seems like the most straightforward way to get all the rows from the three tables. The other options don't seem quite right for this scenario.

upvoted 0 times

...

Lili

10 months ago

Hmm, this question seems a bit tricky. I think the answer is option A, 'join kind = inner'. We need to link the three tables, and the inner join operator is typically used to return all rows that have matching values in both tables.

upvoted 0 times

...