How should you complete the query?

exams SC-200 V5 SC-200 exam 0 Comments

HOTSPOT

You have a Microsoft Sentinel workspace.

You need to create a KQL query that will identify successful sign-ins from multiple countries during the last three hours.

How should you complete the query? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point