Microsoft Certified Identity And Access Administrator Associate · Free Practice Question Medium
Question 4
Your organization suspects that it has experienced a security breach, and you need to examine the Azure AD activity logs that have been forwarded to Azure Sentinel and saved in an Azure Logs Analytics Workspace. Can you please clarify which programming language is suitable for querying these logs?
-
A
KQL
-
B
T-SQL
-
C
PowerShell
-
D
.NET
Reveal correct answer
Correct answer: A
Explanation
Answer A is correct because the Kusto Query Language (KQL) is used to query data from a Log Analytics Workspace.
Answer B is not correct because Transact SQL (T-SQL) is used to query relational database systems like SQL Server.
Answer C is not correct because PowerShell is used for various administrative and automation tasks, but it is not available for querying data from a log analytics workspace.
Answer D is not correct because .NET is a framework that supports several different languages used to develop applications. It is not available to query data from a log analytics workspace.
If you want to learn more, go to:
Audit Microsoft Sentinel queries and activities | Microsoft Learn
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
