Configuring Workflow Automation

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Security Monitoring and Automation

What you'll be asked

  1. Which Azure resource is primarily used to create and manage workflow automations in Microsoft Defender for Cloud?
  2. When configuring a workflow automation in Microsoft Defender for Cloud, what is the purpose of the 'Trigger' setting?
  3. If you want to automate a response to a specific Microsoft Sentinel incident, which component must be configured within the Sentinel workspace?
  4. You have a Logic App that modifies security group rules. What is the minimum permission required for the Logic App's Managed Identity to successfully perform this action?
  5. A security engineer needs to trigger a Logic App for Defender for Cloud alerts that only occur on resources tagged with 'Environment: Production'. How can this be achieved?

Answers and explanations come after you submit.