Knowledge check

Choose the best response for each of the questions below.

Check your knowledge

Which of the following operations is a typical scenario for using a Microsoft Sentinel watchlist?

Creating more alerts to help identify issues.

Export business data as a watchlist.

Responding to incidents quickly with the rapid import of IP addresses.

How do you access a new watchlist named MyList in KQL?

_Watchlist('MyList ')

_GetWatchlist('MyList')

_Getlist('MyList ')

You must answer all questions before checking your work.