You have an Azure Sentinel deployment.
You need to create a scheduled query rule named Rule1.
What should you use to define the query rule logic for Rule1?

A. a Transact-SQL statement

B. a JSON definition

C. GraphQL

D. a Kusto query








 

Suggested Answer: D

Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-detect-threats-custom

This question is in AZ-500 Exam
For getting Microsoft Azure Security Engineer Associate Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.