SC-200 Certification Practice Question #260

Question

You need to complete the query for failed sign-ins to meet the technical requirements.
Where can you find the column name to complete the where clause?

Accepted Answer

Completing a KQL `where` clause requires knowing the exact column name on the target table. The Log Analytics workspace query (Logs) window is the only listed surface that exposes the table schema and provides IntelliSense column suggestions as you type — or lets you run a broad query and read the returned column headers. MS Learn's KQL/Log Analytics guidance confirms queries are designed and tested in the Logs screen, where the `where` operator filters on a named column. The Suggested Answer, the unanimous 20-vote Most Voted, and two Highly Voted/strongly upvoted comments all converge on D with no meaningful dissent, so confidence is high.

More SC-200 practice questions