What should you do?

You have an Azure subscription that contains several Azure SQL databases and an Azure sentinel workspace.

You need to create a saved query in the workspace to find event reported by Advanced. Threat protection for Azure SQL Database.

What should you do?
A . From Azure CLI run the Get-AzOperationalInsightsworkspace cmdlet.
B . From the Azure SQL Database query editor, create a Transact-SQL query.
C . From the Azure Sentinel workspace, create a Custom query languages query.
D . From Microsoft SQL Server Management Studio (SSMS), create a Transact-SQL query.

View Answer

Answer: A