Microsoft Exam SC-200 Topic 2 Question 52 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 52
Topic #: 2

You have a Microsoft 365 subscription that uses Microsoft Purview and Microsoft Teams.

You have a team named Team1 that has a project named Project 1.

You need to identify any Project1 files that were stored on the team site of Team1 between February 1, 2023, and February 10, 2023.

Which KQL query should you run?

AOption A

BOption B

COption C

DOption D

Show Suggested Answer

Suggested Answer: C

This will add all the IP addresses in the range of 171.23.34.32/27 as threat indicators. This is the simplest and most efficient way to add all the IP addresses in the range.

by Bette at Mar 31, 2023, 06:47 AM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Dorthy

2 days ago

Option C is the way to go. It's concise, specific, and gets the job done. No need to overcomplicate things.

upvoted 0 times

...

Isadora

22 days ago

I'm still learning KQL, but Option C seems to be the most well-structured and targeted query. It's got my vote!

upvoted 0 times

...

Sol

24 days ago

Option C looks like the correct answer. It uses the right date range and the KQL query seems to target the right team and project.

upvoted 0 times

Shanda

3 days ago

I agree, Option C seems to be the most suitable choice.

upvoted 0 times

...

Colette

26 days ago

Well, I think Option C makes more sense because it specifies the date range we need to search for.

upvoted 0 times

...

Garry

1 months ago

I disagree, I believe Option B is the right query to identify the Project1 files.

upvoted 0 times

...

Colette

1 months ago

I think the correct KQL query to run is Option C.

upvoted 0 times

...