SC-100 Practice Question 3900
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: medium
An architect needs to automate incident triage and remediation in Microsoft Sentinel. What two integrated technologies handle automated logic and orchestrated third-party response actions?
Answer Options
A
Sentinel Automation Rules and Playbooks (Azure Logic Apps)
B
Command Prompt batch files and Windows Task Scheduler
C
Exchange transport rules and Outlook inbox rules
D
SharePoint workflows and Power BI metrics
Correct Answer
A: Sentinel Automation Rules and Playbooks (Azure Logic Apps)
Explanation
Microsoft Sentinel Automation Rules execute trigger-based triage, tagging, and assignment, while Sentinel Playbooks (built on Azure Logic Apps) handle complex multi-step automated remediation workflows.