You have an Azure subscription that contains a Microsoft Sentinel workspace. You need to create a playbook that will run automatically in response to a Microsoft Sentinel alert. What should you…

The correct answer is B. an Azure logic app. Azure logic apps are a workflow automation platform that provides a visual designer to model and automate processes as a series of steps or actions. Logic apps can be triggered by events, such as an alert in Microsoft Sentinel, and can perform a variety of actions, such as…

Submitted by manish99· Apr 18, 2026Detect and remediate threats using Microsoft Sentinel

Question

You have an Azure subscription that contains a Microsoft Sentinel workspace. You need to create a playbook that will run automatically in response to a Microsoft Sentinel alert. What should you create first?

Options

Aa hunting query in Microsoft Sentinel
Ban Azure logic app
Can automation rule in Microsoft Sentinel
Da trigger in Azure Functions

How the community answered

(28 responses)

B
96% (27)
D
4% (1)

Explanation

Azure logic apps are a workflow automation platform that provides a visual designer to model and automate processes as a series of steps or actions. Logic apps can be triggered by events, such as an alert in Microsoft Sentinel, and can perform a variety of actions, such as sending an email or creating a work item in Azure DevOps.

Topics

#Microsoft Sentinel#Playbooks#Azure Logic Apps#Automation

Community Discussion

No community discussion yet for this question.

Full SC-200 Practice