Configuring Automation in Sentinel

What you'll be asked

1. Which component in Microsoft Sentinel is primarily used to automate responses to security incidents?
2. You want an automation rule to trigger only when an incident is created with a specific severity level. Where is the best place to configure this logic?
3. When building a playbook for Microsoft Sentinel, which Azure service is used to define the workflow steps and triggers?
4. You have an automation rule that triggers a playbook. If the playbook fails to execute, where can you check the execution history and error details?
5. You need to perform a complex automated response that involves querying a third-party API, updating an incident, and sending a notification. If you want to use Managed Identities for authentication, what is the prerequisite for the Playbook?

Answers and explanations come after you submit.