nerdexam
Microsoft

AZ-500 · Question #226

You have an Azure subscription named Sub1. In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1. You need to modify…

The correct answer is C. Azure Logic Apps Designer. Azure Logic Apps Designer is the correct tool because workflow automations in Azure Security Center are built on Azure Logic Apps under the hood. When you create or modify a WF1 workflow automation, it is actually a Logic App, and the Logic Apps Designer is the visual interface…

Submitted by kwame.gh· Mar 6, 2026Secure Azure using Microsoft Defender for Cloud and Microsoft Sentinel

Question

You have an Azure subscription named Sub1. In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1. You need to modify WF1 to send email messages to a distribution group named Alerts. What should you use to modify WF1?

Options

  • AAzure Application Insights
  • BAzure Monitor
  • CAzure Logic Apps Designer
  • DAzure DevOps

How the community answered

(46 responses)
  • A
    4% (2)
  • B
    4% (2)
  • C
    78% (36)
  • D
    13% (6)

Explanation

Azure Logic Apps Designer is the correct tool because workflow automations in Azure Security Center are built on Azure Logic Apps under the hood. When you create or modify a WF1 workflow automation, it is actually a Logic App, and the Logic Apps Designer is the visual interface used to edit its triggers, actions, and configurations-such as changing the recipient of an email from User1 to a distribution group like Alerts.

Why the distractors are wrong:

  • Azure Application Insights (A) is an application performance monitoring service used for logging and diagnostics, not for configuring workflow automations or email actions.
  • Azure Monitor (B) handles alerting and metrics at the infrastructure level and can trigger Logic Apps, but it is not used to modify the internal configuration of a Logic App workflow.
  • Azure DevOps (D) is a CI/CD and project management platform with no direct role in editing Security Center workflow automations.

Memory Tip: Think of it this way - Security Center workflow automations = Logic Apps in disguise. Any time you need to edit what happens inside a workflow automation (actions, recipients, conditions), go to the Logic Apps Designer, just as you would for any standard Logic App.

Topics

#Azure Security Center#Workflow Automation#Azure Logic Apps#Security Operations

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice