ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 7 question 5 discussion

Actual exam question from Microsoft's SC-200
Question #: 5
Topic #: 7
[All SC-200 Questions]

HOTSPOT
-

You have a Microsoft 365 subscription.

You need to identify all the security principals that submitted requests to change or delete groups.

How should you complete the KQL query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by teho99 at April 29, 2024, 8:53 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Edindude
2 months, 2 weeks ago
MicrosoftGraphActivities | where RequestUri contains '/group' | where RequestMethod != "GET" | project AppId, UserId, ServicePrincipalId
upvoted 4 times
...
smanzana
9 months ago
Correct
upvoted 2 times
...
teho99
12 months ago
First I think it's POST req, but then i see "identify submitted requests" and now I know answer is GET.
upvoted 4 times
kukuliquid
11 months, 2 weeks ago
The original answer is correct but this explanation is false RequestMethod DIFFERS FROM "GET" meaning it will return requests that are not simple get, but can be POST, PUT, UPDATE, DELETE...
upvoted 7 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago