Q25 Monitor Domain 4 · 20–25% of exam Priority · Real Exam

Which KQL function filters to the last 24 hours?

  1. A ago(24h) (correct answer)
  2. B now(-24h)
  3. C datetime(24h)
  4. D startofday()

Shortcut: ago(24h) yields the timestamp 24 hours before now, so 'where timestamp > ago(24h)' scopes the query to the last day.