Microsoft Security Operations Analyst Associate SC-200 Practice Question
You are writing an advanced hunting query in Microsoft Defender XDR to locate executable files whose SHA256 value matches any hash in a predefined string array named targetHashes. The comparison must be case-sensitive and must match the whole hash value only, not a substring. Which Kusto Query Language (KQL) operator should you use in the where clause to meet the requirement?
The in operator compares the value of a column to a comma-separated list (or to the contents of a scalar dynamic array) using case-sensitive, whole-string equality. This satisfies the need to match the complete SHA256 value exactly as it appears in targetHashes.
in is case-sensitive by default and does not perform substring matching.
contains and contains_cs perform substring searches, so they would return false positives for hashes that only partially match.
has_any is designed to look for any element of an array inside a dynamic array column, not to compare a scalar column against an external list.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is the SHA256 value mentioned in the question?
Open an interactive chat with Bash
What is the purpose of case sensitivity in the **in** operator?
Open an interactive chat with Bash
How does the **has_any** operator differ from the **in** operator?
Open an interactive chat with Bash
Microsoft Security Operations Analyst Associate SC-200
Manage security threats
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .