1. Home
  2. Discussions
  3. Microsoft
  4. Microsoft Certified: Security Operations Analyst Associate
  5. SC-200 Discussions
  6. SC-200 Exam Topic 1 Question 9 Discussion

Microsoft Security Operations Analyst SC-200 Question # 9 Topic 1 Discussion

 Microsoft Discussions      Browse All Questions      Go to Exam Detail      Get Premium Access
 Previous
Next  

Microsoft Security Operations Analyst SC-200 Question # 9 Topic 1 Discussion

SC-200 Exam Topic 1 Question 9 Discussion:
Question #: 9
Topic #: 1

You need to configure event monitoring for Server1. The solution must meet the Microsoft Sentinel requirements. What should you create first?
A.

a Microsoft Sentinel automation rule

B.

a Microsoft Sentinel scheduled query rule

C.

a Data Collection Rule (DCR)

D.

an Azure Event Grid topic

Get Premium SC-200 Questions
Actual exam question for Microsoft SC-200 exam by Rogue33111 at Aug 2, 2025, 12:00:00 AM

Contribute your Thoughts:


Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.

Submit
 Previous
Next