SC-200 Question #193: Real Exam Question with Answer & Explanation

The correct answer is B: a workbook. A Workbook is a collection of visualizations and data that can be used to analyze and report on data in Azure Sentinel. It can be used to create custom reports that visualize sign-in information https://learn.microsoft.com/en-us/azure/sentinel/monitor-your-data

Submitted by ngozi_ng· Apr 18, 2026Detect and remediate threats using Microsoft Sentinel

Question

You have an Azure subscription that uses Microsoft Sentinel. You need to create a custom report that will visualise sign-in information over time. What should you create first?

Options

Aa hunting query
Ba workbook
Ca notebook
Da playbook

Explanation

A Workbook is a collection of visualizations and data that can be used to analyze and report on data in Azure Sentinel. It can be used to create custom reports that visualize sign-in information https://learn.microsoft.com/en-us/azure/sentinel/monitor-your-data

Topics

#Microsoft Sentinel#Workbooks#Custom Reports#Data Visualization

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice Browse All SC-200 Questions