MS-102 · Question #571
You have a Microsoft 365 subscription that contains a user named User1. You need to ensure that User1 can gather and summarize a custom set of data from signals in the Microsoft Defender XDR…
The correct answer is D. From Advanced hunting, create a new query in the query builder. The Advanced hunting query builder allows users to create custom data queries in Microsoft Defender XDR without needing KQL knowledge, enabling them to gather and summarize signals through a guided interface.
Question
You have a Microsoft 365 subscription that contains a user named User1. You need to ensure that User1 can gather and summarize a custom set of data from signals in the Microsoft Defender XDR environment. The solution must NOT require that User1 have KQL knowledge. What should you do in Microsoft Defender XDR?
Options
- AFrom Advanced hunting, create a new query in the query editor.
- BFrom Cloud Discovery, create a report.
- CFrom API Explorer, create a query.
- DFrom Advanced hunting, create a new query in the query builder.
How the community answered
(35 responses)- A6% (2)
- B9% (3)
- C14% (5)
- D71% (25)
Explanation
The Advanced hunting query builder allows users to create custom data queries in Microsoft Defender XDR without needing KQL knowledge, enabling them to gather and summarize signals through a guided interface.
Topics
Community Discussion
No community discussion yet for this question.