exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 4 question 7 discussion

Actual exam question from Microsoft's AZ-500
Question #: 7
Topic #: 4
[All AZ-500 Questions]

You onboard Azure Sentinel. You connect Azure Sentinel to Azure Security Center.
You need to automate the mitigation of incidents in Azure Sentinel. The solution must minimize administrative effort.
What should you create?

  • A. an alert rule
  • B. a playbook
  • C. a function app
  • D. a runbook
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Teesmd
Highly Voted 3 years, 9 months ago
Provided answer (Playbook) is correct
upvoted 33 times
...
mayenite
Highly Voted 3 years, 3 months ago
In exam
upvoted 12 times
...
ESAJRR
Most Recent 9 months ago
Selected Answer: B
B. a playbook
upvoted 1 times
...
majstor86
1 year, 3 months ago
Selected Answer: B
B. a playbook
upvoted 2 times
...
ligu
1 year, 3 months ago
The answer is correct
upvoted 1 times
...
F117A_Stealth
1 year, 6 months ago
Selected Answer: B
a playbook
upvoted 1 times
...
NinjaSchoolProfessor
1 year, 10 months ago
In exam 15-July-2022
upvoted 4 times
...
Exams_Prep_2021
1 year, 11 months ago
In Exam - 20/6/2022 - 1 Case Study ( 6 ) - Lab ( 10 Tasks )
upvoted 2 times
...
Irishtk
2 years ago
Ans B. "A playbook can help automate and orchestrate your response, and can be set to run automatically when specific alerts or incidents are generated, by being attached to an analytics rule or an automation rule, respectively" https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook?tabs=LAC
upvoted 7 times
somenick
1 year, 8 months ago
FYI - Azure Sentinel is now called Microsoft Sentinel
upvoted 2 times
...
...
Eltooth
2 years, 2 months ago
Selected Answer: B
B is correct answer.
upvoted 3 times
...
smilinghacker
2 years, 4 months ago
Playbook is under Sentinel and Runbook is under Azure automate.
upvoted 7 times
...
itbrpl
2 years, 7 months ago
Today's exam 20/10/21..
upvoted 3 times
...
Jco
2 years, 8 months ago
#exam ques # 29 Sep
upvoted 3 times
...
TonytheTiger
2 years, 8 months ago
## Exam Question - 17 Sept 2021 ##
upvoted 2 times
...
francis6170
2 years, 8 months ago
Got this in the AZ-500 exam (Sept 2021)! A: B
upvoted 3 times
...
Mcgood
2 years, 9 months ago
Exam Collection says it's an alert rule eish
upvoted 2 times
...
SecurityAnalyst
2 years, 9 months ago
# IN EXAM - 31/8/2021
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...