Pre-Summer Special Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: validbest

Exam SC-200 All Questions
Exam SC-200 All Questions

View all questions & answers for the SC-200 exam

Microsoft Certified: Security Operations Analyst Associate SC-200 Question # 75 Topic 8 Discussion

SC-200 Exam Topic 8 Question 75 Discussion:
Question #: 75
Topic #: 8

You need to configure event monitoring for Server1. The solution must meet the Microsoft Sentinel requirements. What should you create first?


A.

a Microsoft Sentinel automation rule


B.

a Microsoft Sentinel scheduled query rule


C.

a Data Collection Rule (DCR)


D.

an Azure Event Grid topic


Get Premium SC-200 Questions

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.