Microsoft Security Operations Analyst Associate SC-200 Practice Question
You are a Security Operations Analyst for an organization that uses Microsoft Sentinel. You want to use the built-in Identity & Access workbook template as a starting point, customize several visualizations, and share the result with other analysts, while keeping the original template unchanged. Which action should you perform first?
Copy the template resource from the default resource group to a new resource group by using Azure Resource Explorer.
Open the template and click Edit, make your changes, and then publish the workbook.
Open the template from the Templates tab and select Save, choosing the Shared location so a copy is created before editing.
Export the template's ARM JSON file, modify it offline, and redeploy it to the workspace.
To customize a Microsoft Sentinel workbook template, you must first create your own copy of the template. In the Workbooks blade, select the template from the Templates tab, open it in read-only mode, and then select Save. When prompted, choose the Shared location so that the resulting workbook is stored under Shared workbooks and is visible to all analysts who have access to the Sentinel workspace. After the workbook is saved, you can switch to Edit mode and safely modify queries, parameters, and visualizations. Choosing Edit before saving would attempt to edit the read-only template, which is not permitted. Exporting or copying the ARM resource is unnecessary overhead for routine customization tasks and does not automatically publish the workbook in the correct Sentinel location.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a Microsoft Sentinel Workbook?
Open an interactive chat with Bash
Why should you save the template in the Shared location before editing?
Open an interactive chat with Bash
What is the ARM JSON file, and why wouldn’t you use it for routine workbook customization?
Open an interactive chat with Bash
Microsoft Security Operations Analyst Associate SC-200
Manage security threats
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .