Courseiva

AZ-500

Study mode — explanations shown

1

Manage identity and access

hard

A KQL query in Microsoft Sentinel detects impossible travel but returns many false positives from known VPN egress IP addresses. Which two changes would best reduce noise while preserving useful detections?

Select 2 answers

0 of 50 answered