Microsoft Exam SC-200 Topic 3 Question 58 Discussion

Actual exam question for Microsoft's SC-200 exam

Question #: 58
Topic #: 3

You have 50 Microsoft Sentinel workspaces.

You need to view all the incidents from all the workspaces on a single page in the Azure portal. The solution must minimize administrative effort.

Which page should you use in the Azure portal?

AMicrosoft Sentinel - Incidents

BMicrosoft Sentinel - Workbooks

CMicrosoft Sentinel

DLog Analytics workspaces

Show Suggested Answer

Suggested Answer: D

by Jesusita at Aug 29, 2023, 08:44 PM

Limited Time Offer

25%

Off

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Bronwyn

6 hours ago

I'm going with C) Microsoft Sentinel. Surely that's where I'll find the incidents from all my workspaces, right? This can't be too complicated.

upvoted 0 times

...

Justine

2 days ago

I think the answer is B) Microsoft Sentinel - Workbooks. That seems like the best way to consolidate incidents from multiple workspaces onto a single page.

upvoted 0 times

...

Laila

16 days ago

That makes sense, I see your point. Thanks for sharing your perspective.

upvoted 0 times

...

Irma

17 days ago

I disagree, I believe the answer is C) Microsoft Sentinel because it encompasses all the workspaces.

upvoted 0 times

...

Laila

20 days ago

I think the answer is A) Microsoft Sentinel - Incidents because it specifically mentions viewing incidents.

upvoted 0 times

...