You have an Azure subscription that contains several Azure SQL databases and an Azure Sentinel workspace.
You need to create a saved query in the workspace to find events reported by Azure Defender for SQL.
What should you do?

A. From Azure CLI, run the Get-AzOperationalInsightsWorkspace cmdlet.

B. From the Azure SQL Database query editor, create a Transact-SQL query.

C. From the Azure Sentinel workspace, create a Kusto query language query.

D. From Microsoft SQL Server Management Studio (SSMS), create a Transact-SQL query.








 

Suggested Answer: C



This question is in AZ-500 Exam
For getting Microsoft Azure Security Engineer Associate Certificate


Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by Microsoft. 
The website does not contain actual questions and answers from Microsoft's Certification Exams.
Trademarks, certification & product names are used for reference only and belong to Microsoft.