Exam AZ-900 topic 1 question 230 discussion

correct answer 「Playbooks are collections of procedures that can be run from Azure Sentinel in response to an alert or incident. A playbook can help automate and orchestrate your response, and can be set to run automatically when specific alerts or incidents are generated, by being attached to an analytics rule or an automation rule, respectively. It can also be run manually on-demand.」 https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook

A resposta correta para a pergunta é: ✅ "automatically respond to threats." 🔧 Explicação: Playbooks no Azure Sentinel são fluxos de trabalho automatizados que usam Azure Logic Apps para responder automaticamente a ameaças. Quando um alerta é gerado, o Sentinel pode acionar um playbook para tomar ações como: Isolar máquinas infectadas 🖥️🔒 Bloquear endereços IP suspeitos 🚫🌐 Notificar a equipe de segurança 📩🔔 Integrar com ferramentas externas como Teams, Email ou outras plataformas SIEM

Rememeber the "Security" key word in "SIEM" Sentinel. Security - Threat.

remember Security Information and Event Management (SIEM) Sentinel - "Security "

Same as question 247. https://www.examtopics.com/discussions/microsoft/view/87281-exam-az-900-topic-1-question-247-discussion

"automatically respond to threats" is the answer. https://learn.microsoft.com/en-us/azure/sentinel/automate-responses-with-playbooks#what-is-a-playbook A playbook is a collection of these remediation actions that can be run from Microsoft Sentinel as a routine. A playbook can help automate and orchestrate your threat response; it can be run manually on-demand on entities (in preview - see below) and alerts, or set to run automatically in response to specific alerts or incidents, when triggered by an automation rule. For example, if an account and machine are compromised, a playbook can isolate the machine from the network and block the account by the time the SOC team is notified of the incident.

Answer: Automatically respond to threats

on exam March 30, 2022

Got Feb 10, 2022

Answe is correct. Off topic, this was not mentioned in learning path or did i miss it?

Be asked in the 11.11.2021 exam!

on exam OCT 22, 2021

Correct