ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 7 question 8 discussion

Actual exam question from Microsoft's SC-200
Question #: 8
Topic #: 7
[All SC-200 Questions]

HOTSPOT
-

You have a Microsoft Sentinel workspace that contains a custom workbook.

You need to query for a summary of security events. The solution must meet the following requirements:

• Identify the number of security events ingested during the past week.
• Display the count of events by day in a chart.

How should you complete the query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by laddu001 at June 17, 2024, 2:06 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
g_man_rap
Highly Voted 8 months, 1 week ago
SecurityEvent | summarize count() by bin(TimeGenerated, 1d) | render timechart
upvoted 5 times
...
smanzana
Most Recent 9 months ago
Correct
upvoted 2 times
...
laddu001
10 months, 2 weeks ago
SecurityEvent | where TimeGenerated >= ago(7d) // Filter events from the past 7 days | summarize EventCount = count() by bin(TimeGenerated, 1d) // Count events per day | render timechart
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago