Skip to content
AZ-500
Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel
medium
Question 2 of 68

In a scheduled Microsoft Sentinel analytics rule, which relationship between the query interval and the lookback period is valid?

AThe lookback period must be shorter than the query interval
BThe lookback period must be equal to 1 minute regardless of interval
CThe lookback period must be longer than or equal to the query interval
DThe query interval is ignored after the first run

Educational Content — CertQnA practice questions are written against official exam objectives, covering the same domains tested on the real exam. All content is original and independent — not actual exam questions, not affiliated with any certification vendor. Learn more about our content policy

Discussion

Be the first to share your understanding of this concept

⚠️ Discussion is for concept clarification only. Do not share or request actual exam questions or answers.

Sign in to join the discussion