CCDL1
CyberDefenders Certified CyberDefender Level 1 (CCDL1)
Full question bankEnglish
Exam overviewPractice session
A SOC analyst is investigating an alert in Microsoft Sentinel. Which Kusto Query Language (KQL) operator would filter SecurityEvent records to show only failed logon events (EventID 4625) from the last 24 hours?
Loading your practice session…