SC-200 Practice Question 3694
Exam: SC-200
Domain: Manage a security operations environment
Difficulty: medium
What is the function of Microsoft Sentinel Automation Rules compared to Logic Apps Playbooks?
Answer Options
A
Automation rules handle basic triage/routing; Playbooks run complex Logic Apps
B
Automation rules only work on Linux; Playbooks only work on Windows
C
Playbooks cannot interact with external services
D
There is no functional difference between the two tools
Correct Answer
A: Automation rules handle basic triage/routing; Playbooks run complex Logic Apps
Explanation
Automation rules execute directly inside Sentinel to triage, tag, suppress, assign, or route incidents automatically, and can trigger a Playbook (Azure Logic App) for complex external tasks.