Exam SC-200 All QuestionsBrowse all questions from this exam
Question 263

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.

After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.

You have an Azure subscription that uses Microsoft Defender XDR.

From the Microsoft Defender portal, you perform an audit search and export the results as a file named File1.csv that contains 10,000 rows.

You use Microsoft Excel to perform Get & Transform Data operations to parse the AuditData column from File1.csv. The operations fail to generate columns for specific JSON properties.

You need to ensure that Excel generates columns for the specific JSON properties in the audit search results.

Solution: From Defender, you modify the search criteria of the audit search to increase the number of returned records, and then you export the results. From Excel, you perform the Get & Transform Data operations by using the new export.

Does this meet the requirement?

    Correct Answer: B

    Modifying the search criteria to increase the number of returned records does not address the problem of Excel failing to generate columns for specific JSON properties. The issue likely lies in how Excel's Get & Transform Data feature interprets the JSON structure. Therefore, simply increasing the number of records will not resolve the problem of parsing the JSON data correctly.

Discussion
90158a0Option: B

From ChatGPT: No, this solution does not meet the requirement. The issue with generating columns for specific JSON properties in Excel from the audit search results typically arises from limitations in how Excel's Get & Transform Data (Power Query) interprets complex JSON structures. Increasing the number of returned records in the search criteria won't address this fundamental issue.

e072f83Option: B

no: this is the step before the transform to json. https://learn.microsoft.com/en-us/purview/audit-log-export-records