Question 202
SC-200 voucher + Udemy course (lifetime access) = ₹3,500 for Indian ID card holders.
Details →You have a Microsoft 365 E5 subscription. You have the following KQL query. You need to use the query to create a Microsoft Defender XDR custom detection rule that can isolate an onboarded device. How should you modify the query?
- AAdd the AccountUpn and Timestamp columns to the project operator.
- BAdd a distinct operator.
- CAdd a summarize operator.
- DAdd the DeviceId and Timestamp columns to the project operator.