ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-200 All Questions

View all questions & answers for the SC-200 exam
Go to Exam

Exam SC-200 topic 3 question 14 discussion

Actual exam question from Microsoft's SC-200
Question #: 14
Topic #: 3
[All SC-200 Questions]

A company uses Azure Sentinel.
You need to create an automated threat response.
What should you use?

  • A. a data connector
  • B. a playbook
  • C. a workbook
  • D. a Microsoft incident creation rule
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
by NoNameP at Aug. 30, 2021, 2:06 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Eltooth
Highly Voted 3 years, 2 months ago
Correct - Playbook
upvoted 9 times
...
DChilds
Most Recent 8 months, 2 weeks ago
Selected Answer: B
Playbook.
upvoted 1 times
...
chepeerick
1 year, 2 months ago
Correct
upvoted 1 times
...
kevin23699
1 year, 3 months ago
It must be 0,0
upvoted 1 times
...
ACSC
2 years, 1 month ago
Selected Answer: B
Use playbooks together with automation rules to automate your incident response and remediate security threats detected by Microsoft Sentinel
upvoted 2 times
...
NoNameP
3 years, 4 months ago
Correct
upvoted 4 times
...
somsom
3 years, 4 months ago
correct
upvoted 4 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel