You have an Azure subscription named Sub1. In Azure Security Center, you have a security playbook named Play1. Play1 is configured to send an email message to a user named User1. You need to modify…

Question

Options

• AAzure DevOps
• BAzure Application Insights
• CAzure Monitor
• DAzure Logic Apps Designer

• A
  2% (1)
• B
  2% (1)
• C
  5% (3)
• D
  92% (61)

Explanation

Azure Logic Apps Designer is the correct tool because Security Center playbooks are built on top of Azure Logic Apps. When you need to modify a playbook's workflow - such as changing the email recipient from a user to a distribution group - you do so through the Logic Apps Designer, which provides a visual interface for editing triggers, actions, and conditions within the playbook.

Why the distractors are wrong:

• Azure DevOps (A) is a CI/CD and project management platform, not a tool for modifying security playbooks or Logic App workflows.
• Azure Application Insights (B) is an application performance monitoring service used for telemetry and diagnostics - it has no role in editing playbook configurations.
• Azure Monitor (C) is used for collecting and analyzing metrics and logs; while it can trigger alerts, it is not used to modify the internal logic of a Security Center playbook.

Memory Tip: Think of it this way - a playbook is really just a Logic App in disguise. Whenever you need to edit a playbook (change recipients, add steps, modify actions), always go to Logic Apps Designer, because that's where the playbook lives under the hood. "Play = Logic App → Edit with Logic Apps Designer."

No community discussion yet for this question.