SC-200 Question #305: Real Exam Question with Answer & Explanation

Question

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have an Azure subscription that uses Microsoft Defender XDR. From the Microsoft Defender portal, you perform an audit search and export the results as a file named File1.csv that contains 10,000 rows. You use Microsoft Excel to perform Get & Transform Data operations to parse the AuditData column from File1.csv. The operations fail to generate columns for specific JSON properties. You need to ensure that Excel generates columns for the specific JSON properties in the audit search results. Solution: From Excel, you apply filters to the existing columns in File1.csv to reduce the number of rows, and then you perform the Get & Transform Data operations to parse the AuditData column. Does this meet the requirement?

Options

• AYes
• BNo

Explanation

The Excel Get & Transform operations failed to generate columns from the AuditData, indicating the parsing of the exported audit search results was unsuccessful.

Common mistakes.

• A. The statement clearly indicates the operations fail to generate columns for parsing, which directly contradicts the idea that the goal of successfully parsing the data was met.

Concept tested. Microsoft Defender XDR audit log parsing

No community discussion yet for this question.