SC-100 Certification Practice Question #4

Question

You have a Microsoft 365 E5 subscription and an Azure subscription.
You are designing a Microsoft deployment.
You need to recommend a solution for the security operations team. The solution must include custom views and a dashboard for analyzing security events.
What should you recommend using in Microsoft Sentinel?

Accepted Answer

The requirement is "custom views and a dashboard for analyzing security events." In Microsoft Sentinel, workbooks are the feature that provides interactive, customizable visual dashboards built on Azure Monitor workbooks — exactly the custom-view-plus-dashboard capability described. The Suggested Answer, a unanimous 13-vote community consensus, and MS Learn all agree, with no dissent. Notebooks (hunting/ML), playbooks (SOAR automation), and threat intelligence (IOC enrichment) do not provide custom dashboards, so they are eliminated.

More SC-100 practice questions