Microsoft AZ-500 Exam - Topic 1 Question 105 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 105
Topic #: 1

You have an Azure subscription that contains a Microsoft Sentinel workspace named Sentinel 1. Sentinel! is NOT onboarded to the unified security operations platform in Microsoft 365.

You need to create a new playbook in Sentinel 1. The solution must support the use of automation rules.

Which type of playbook should you create?

Aa playbook with an incident trigger only

Ba playbook with an alert trigger only

Ca playbook with an entity trigger only

Da playbook with an incident trigger or an alert trigger

Ea playbook with an alert trigger or an entity trigger

Show Suggested Answer

Suggested Answer: D

by Shannon at May 31, 2026, 08:45 AM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!