SC-200 Practice Question 3796
Exam: SC-200
Domain: Respond to security incidents
Difficulty: medium
You want to automate the remediation of compromised users flagged by Microsoft Sentinel. Which Microsoft Sentinel Playbook template connector executes user credential revocation in Entra ID?
Answer Options
A
The Microsoft Entra ID connector (actions: Revoke sessions / Block user)
B
The Azure Virtual Network peering connector
C
The Microsoft Excel online connector
D
The Azure SQL database connector
Correct Answer
A: The Microsoft Entra ID connector (actions: Revoke sessions / Block user)
Explanation
The Microsoft Entra ID connector (formerly Azure AD connector) in Azure Logic Apps executes actions like "Revoke user sessions" and "Block user".