Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Question 42 of 125
Free Preview · 125 of 415 · questions 1–125 of 415 are free. Sign up free to sync your progress across devices.
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
I think the images for the answers are swapped in the question. You need to select the "Union" operator first and then the second table name "IdentityLogonEvents". FirstTable | take 100 | union ( SecondTable | take 100) | project TimeGenerated, AccountName Ref:
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I think the images for the answers are swapped in the question. You need to select the "Union" operator first and then the second table name "IdentityLogonEvents". FirstTable | take 100 | union ( SecondTable | take 100) | project TimeGenerated, AccountName Ref: https://learn.microsoft.com/en-us/training/modules/build-multi-table-statements-kusto-query-language/2-use-union-operator
Can explain how use the take operator in this query would return the 100 MOST RECENT logons? I thought Take returned a random selection. wouldn't it be better to use Top instead? ie - top 100 by Timestamp
Answer: IdentityLogonEvents Union