You have a Microsoft 365 E5 subscription and an Azure subscription. You are designing a Microsoft Sentinel deployment. You need to recommend a solution for the security operations team. The solution…

The correct answer is B. workbooks. Microsoft Sentinel Workbooks are the correct tool for creating custom dashboards and visualizations of security event data. Built on Azure Monitor Workbooks, they support interactive charts, tables, and queries (KQL) that security analysts use to monitor and investigate events…

Design security operations, identity, and compliance capabilities

Question

You have a Microsoft 365 E5 subscription and an Azure subscription. You are designing a Microsoft Sentinel deployment. You need to recommend a solution for the security operations team. The solution must include custom views and a dashboard for analyzing security events. What should you recommend using in Microsoft Sentinel?

Options

Aplaybooks
Bworkbooks
Cnotebooks
Dthreat intelligence

How the community answered

(31 responses)

A
3% (1)
B
87% (27)
C
3% (1)
D
6% (2)

Explanation

Microsoft Sentinel Workbooks are the correct tool for creating custom dashboards and visualizations of security event data. Built on Azure Monitor Workbooks, they support interactive charts, tables, and queries (KQL) that security analysts use to monitor and investigate events in a structured, visual format. Playbooks (A) are automated response workflows built on Azure Logic Apps-they react to alerts, not display them. Notebooks (C) are Jupyter-based analytical tools for deep, ad-hoc data exploration, not persistent dashboards. Threat Intelligence (D) is a data feed and management feature for ingesting and correlating indicators of compromise, not a visualization layer.

Topics

#Microsoft Sentinel#Security Operations#Dashboards#Workbooks

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice