Question 110:
Which of the following are valid KQL operators in Azure Sentinel?
Answer options:
A.Where B.Summarise C.mv-expand D.summarize E.mv-contract
Answer correct:
Correct Answers: A, C and D Option A, C, D are correct. These operators are regularly used in KQL. Option B and D are incorrect. The Summarize operator isn`t very useful on its own. It essentially works like the distinct operator. Reference: