Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Security Operations Analyst Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
When an Azure Security Center Alert is created or triggered (correct answer) (Why?)This is the proper trigger if you want your Logic App to run automatically when a security alert is generated. You can also use a recommendation-based trigger for posture management, but alerts are more actionable for remediation. Workflow automation (correct answer) (Why?)You must configure workflow automation in Microsoft Defender for Cloud to run a Logic App (like LA1) automatically in response to an alert or recommendation.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Im going with 2 and 3 beacuse we can creat a test security alerts. what about if we do not have any recomendation ? https://learn.microsoft.com/en-us/azure/defender-for-cloud/alert-validation?source=docs
When an Azure Security Center Alert is created or triggered (correct answer) (Why?)This is the proper trigger if you want your Logic App to run automatically when a security alert is generated. You can also use a recommendation-based trigger for posture management, but alerts are more actionable for remediation. Workflow automation (correct answer) (Why?)You must configure workflow automation in Microsoft Defender for Cloud to run a Logic App (like LA1) automatically in response to an alert or recommendation.
On second thought, risks are not alerts. So; Trigger the logic app on recommendations and test it by creating a custom recommendation (option 1 / option 1)