Crucial Exams

Microsoft Security Operations Analyst Associate SC-200 Practice Question

You open the Azure AD Sign-in Logs workbook template from the Microsoft Sentinel Workbooks gallery and select Edit. You must customize the workbook with a new title and a fixed Log Analytics workspace parameter, but you also need to keep the original template unchanged so other analysts can still use it. Which action should you perform first after entering edit mode to meet these requirements?

  • Export the workbook as an ARM template, modify the title and parameter in code, and redeploy it to the same resource group.

  • Select View template, choose Save, and overwrite the existing workbook in the Templates tab.

  • Open the workbook's Settings pane, change the title, and select Save as to create a separate copy.

  • Click Publish in the toolbar, then edit the resulting workbook's JSON to set the workspace parameter.

Microsoft Security Operations Analyst Associate SC-200
Manage security threats
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot