Here are all the actual test exam dumps for IT exams. Most people prepare for the actual exams with our test dumps to pass their exams. So it's critical to choose and actual test pdf to succeed.

Exam SC-200 Topic 3 Question 309 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 309
Topic #: 3
You have an Azure subscription that contains a Microsoft Sentinel workspace named WS1 and
100 virtual machines that run Windows Server.
You need to configure the collection of Windows Security event logs for ingestion to WS1. The solution must meet the following requirements:
- Capture a full user audit trail including user sign-in and user sign- out events.
- Minimize the volume of events.
- Minimize administrative effort.
Which event set should you select?

Suggested Answer: B Vote an answer

by Lauren at Oct 29, 2026, 05:54 PM

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.