Free SC-200 Exam Braindumps

- (Exam Topic 3)
You are configuring Azure Sentinel.
You need to send a Microsoft Teams message to a channel whenever a sign-in from a suspicious IP address is detected.
Which two actions should you perform in Azure Sentinel? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

1. A. Add a playbook.
2. B. Associate a playbook to an incident.
3. C. Enable Entity behavior analytics.
4. D. Create a workbook.
5. E. Enable the Fusion rule.

Reveal Solution

Correct Answer: AB
Reference:
https://docs.microsoft.com/en-us/azure/sentinel/tutorial-respond-threats-playbook