HOTSPOT -
You plan to use Azure Sentinel to create an analytic rule that will detect suspicious threats and automate responses.
Which components are required for the rule? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook
The answers are...wait for it... CORRECT!!!!!!
Exam.6 case studies. 3 true/false questions. 47 multiple questions and no simulations. Alot of new questions thats not up here
On exam 1/2/24!
A Kusto query language query An Azure Sentinel Playbook
Correct
Exam - 4/11/21
Correct - KQL & playbook.
Today's exam 20/10/21..
correct
Answers are 100% CORRECT!!
The answers are correct. KQL to detect and Playbook to response
exam 20240715 correct