Free Microsoft SC-200 Security Operations Analyst Actual Exam Questions - Question 13 Discussion

Choosing the event first makes sense so you know where to add the note. After that, adding the actual note should come before saving, or else there’s nothing to save. So the order has to be select event, add note, then save.

I agree with starting by selecting the event, but I’d add that after that, you should choose the option to add or edit notes before saving. You can't save notes without entering them first, so the middle step has to be opening the note editor or similar. Saving is obviously last to lock in your changes. This sequence makes sense to avoid errors and ensure the note actually gets attached properly.

I’d say pick the event first, then click to add a note, and finish by saving it. Adding a note without selecting the event doesn’t seem possible here.

Start with selecting the event, then add the note, last save it.

I think it makes sense to start by selecting the event, then add the note, and finally save it so changes stick. Can't really add notes without picking the event first.

Selecting the event first helps avoid adding notes to the wrong event.

Starting with event selection makes sense, then add notes, save last.

I’d say start with selecting the event you want to add notes to, then move to the option that lets you edit or annotate the event, and finally save or apply those changes. It makes sense to do it this way since you need to pick the correct event first before adding any notes and then confirm the updates. The order of saving last seems logical to avoid losing any work.

This one’s kinda confusing without the images, but I think you have to first find the event, then add notes, and finally save or update the event details. Not 100% sure on the exact terms though.