Microsoft Azure Security Technologies AZ-500 — Topic 4 Question 264

Question

You have an Azure subscription that contains several Azure SQL databases and an Azure Sentinel workspace. You need to create a saved query in the workspace to find events reported by Azure Defender for SQL. What should you do?

Accepted Answer

Correct answer: C. The correct answer is C. Option C: From the Azure Sentinel workspace, create a Kusto query language query.

Microsoft Azure Security Technologies AZ-500 — Question 264