Microsoft Exam SC-200 Topic 3 Question 58 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 58
Topic #: 3

You have 50 Microsoft Sentinel workspaces.

You need to view all the incidents from all the workspaces on a single page in the Azure portal. The solution must minimize administrative effort.

Which page should you use in the Azure portal?

AMicrosoft Sentinel - Incidents

BMicrosoft Sentinel - Workbooks

CMicrosoft Sentinel

DLog Analytics workspaces

Show Suggested Answer

Suggested Answer: D

by Jesusita at Aug 29, 2023, 08:44 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Joaquin

1 months ago

It's gotta be B) Microsoft Sentinel - Workbooks. Anything to avoid jumping between 50 different workspaces. I'm lazy, but in a productive way!

upvoted 0 times

Leeann

3 days ago

B) Microsoft Sentinel - Workbooks

upvoted 0 times

...

Raul

18 days ago

A) Microsoft Sentinel - Incidents

upvoted 0 times

...

Tandra

2 months ago

D) Log Analytics workspaces seems like the logical choice. That's where all the log data is stored, so it makes sense to view the incidents there.

upvoted 0 times

Helene

1 days ago

C) Microsoft Sentinel

upvoted 0 times

...

Mariko

10 days ago

B) Microsoft Sentinel - Workbooks

upvoted 0 times

...

Valentin

20 days ago

A) Microsoft Sentinel - Incidents

upvoted 0 times

...

Bronwyn

2 months ago

I'm going with C) Microsoft Sentinel. Surely that's where I'll find the incidents from all my workspaces, right? This can't be too complicated.

upvoted 0 times

Kati

3 days ago

User 4: Good choice! It's the most efficient way to view all your incidents in one place.

upvoted 0 times

...

Shay

11 days ago

User 3: Thanks for the advice! I'll go with A) Microsoft Sentinel - Incidents then.

upvoted 0 times

...

Leatha

15 days ago

User 3: Thanks for the advice! I'll go with A) Microsoft Sentinel - Incidents to view all the incidents from my workspaces.

upvoted 0 times

...

Lucina

16 days ago

User 2: I agree with Lucina. Using Microsoft Sentinel - Incidents is the best way to minimize administrative effort.

upvoted 0 times

...

Curtis

17 days ago

User 2: I agree with Curtis. Using Microsoft Sentinel - Incidents is the best option to minimize administrative effort.

upvoted 0 times

...

Deonna

1 months ago

User 1: Actually, you should use A) Microsoft Sentinel - Incidents. That's where you can view all the incidents from all your workspaces.

upvoted 0 times

...

Alise

1 months ago

User 1: Actually, you should use A) Microsoft Sentinel - Incidents. That's where you can view all the incidents from all your workspaces.

upvoted 0 times

...

Justine

2 months ago

I think the answer is B) Microsoft Sentinel - Workbooks. That seems like the best way to consolidate incidents from multiple workspaces onto a single page.

upvoted 0 times

...

Laila

2 months ago

That makes sense, I see your point. Thanks for sharing your perspective.

upvoted 0 times

...

Irma

2 months ago

I disagree, I believe the answer is C) Microsoft Sentinel because it encompasses all the workspaces.

upvoted 0 times

...

Laila

3 months ago

I think the answer is A) Microsoft Sentinel - Incidents because it specifically mentions viewing incidents.

upvoted 0 times

...