You have an Azure subscription that contains several Azure SQL databases and an Azure Sentinelworkspace.

Microsoft AZ-500 Question Answer

You have an Azure subscription that contains several Azure SQL databases and an Azure Sentinel

workspace.

You need to create a saved query in the workspace to find events reported by Advanced Threat Protection for Azure SQL Database.

What should you do?

From Azure CLI run the Get-AzOperationalInsightsworkspace cmdlet.

From the Azure SQL Database query editor, create a Transact-SQL query.

From the Azure Sentinel workspace, create a Kusto Query Language query.

From Microsoft SQL Server Management Studio (SSMS), create a Transact-SQL query.

AZ-500 PDF/Engine

Get 65% Discount on All Products, Use Coupon: "ac4s65"