Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 3 question 107 discussion

Actual exam question from Microsoft's SC-200
Question #: 107
Topic #: 3
[All SC-200 Questions]

HOTSPOT
-

You have an Azure subscription that contains a Log Analytics workspace named Workspace1.

You configure Azure activity logs and Microsoft Entra ID logs to be forwarded to Workspace1.

You need to query Workspace1 to identify all the requests that failed due to insufficient authorization.

How should you complete the KQL query? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by chirva at Nov. 8, 2024, 9:59 a.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
sapphire
2 weeks, 1 day ago
explain in - https://learn.microsoft.com/en-us/graph/microsoft-graph-activity-logs-overview Microsoft Graph activity logs and 403
upvoted 1 times
sapphire
2 weeks, 1 day ago
sorry Microsoft Graph activity logs and 401 are correct answers
upvoted 2 times
Tuitor01
4 days, 14 hours ago
403 makes absolutely no sense here, 401 must be the correct choice sine http respond code 401 means basically wrong password and 403 means forbidden. 402 is not even used (reserved ) example query = MicrosoftGraphActivityLogs | where TimeGenerated >= ago(3d) | where ResponseStatusCode == 401 or ResponseStatusCode == 403 | where RequestUri contains "/groups" | summarize UniqueRequests=count_distinct(RequestId) by AppId, ServicePrincipalId, UserId | sort by UniqueRequests desc | limit 20 From https://learn.microsoft.com/en-us/graph/microsoft-graph-activity-logs-overview
upvoted 1 times
...
...
...
0854338
2 weeks, 2 days ago
I wonder what is the logic of this query answer: Why would one use a redundant condition of where xxx = 403 OR xxx = 403 ? This comment is posted on 10/11/2024 when the shown greenbox for answer 1 is AuditLogs and answer 2 is 403.
upvoted 2 times
...
Mobollz
2 weeks, 2 days ago
AzureActivity and 401 https://learn.microsoft.com/en-us/troubleshoot/developer/webapps/iis/www-administration-management/http-status-code
upvoted 2 times
...
Sparkletoss
2 weeks, 3 days ago
I will take activity log and 403 due to insufficient permission. I may be wrong though will be glad if this question can get more discussions on time
upvoted 1 times
Sparkletoss
2 weeks, 3 days ago
I will take Azureactivity and 403 due to insufficient permission. I may be wrong though will be glad if this question can get more discussions on time
upvoted 1 times
...
...
chirva
2 weeks, 3 days ago
GPT4: AzureActivity | where ResponseStatusCode == "401" or ResponseStatusCode == "403" 401 Unauthorized: This status code indicates that the request has not been applied because it lacks valid authentication credentials for the target resource. 403 Forbidden: This status code indicates that the server understood the request but refuses to authorize it. This is typically the status code that indicates insufficient permissions.
upvoted 1 times
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel