Microsoft Security Operations Analyst Associate SC-200 Practice Question

Workbooks in Microsoft Sentinel support parameters that can be bound to all queries in the workbook. Adding a Time range parameter (often inserted by selecting Add parameter and choosing Time range) exposes a picker for analysts to set start and end times. When each query references the parameter by using the {{TimeRange}} or similar binding syntax, Sentinel automatically appends the chosen time filter to every query, ensuring that results are limited to the selected period. Other options-such as creating a workspace selector, enabling cross-visual filtering, or relying on Azure Monitor dashboard settings-do not propagate a time filter to every workbook query by default.