MENU
You have an Azure subscription that has Microsoft Defender for Cloud enabled. Suspicious authentication activity alerts have been appearing in the Workload protections dashboard.
You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort. What should you include in the recommendation?
Suggested Answer: D
Get Premium SC-100 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
RE
Renay
11 months ago
Azure Monitor webhooks might be a simpler option too!
DI
Dino
11 months ago
Wait, can Logic Apps really handle all those alerts efficiently?
AM
Amie
12 months ago
Not sure about that, Azure Functions could be more flexible.
ST
Stephaine
12 months ago
Definitely agree, it’s super easy to set up!
CA
Carman
1 year ago
I think Azure Logic Apps is the way to go for workflow automation.
IL
Iluminada
1 year ago
I’m leaning towards Azure Logic Apps too, but I wonder if there are any scenarios where Event Hubs would be more appropriate?
JA
Jamal
1 year ago
I practiced a similar question, and I feel like Azure Functions could be overkill for just evaluating alerts.
MA
Maybelle
1 year ago
I'm a bit unsure, but I remember something about Azure Monitor webhooks being useful for alerting. Would that work for this scenario?
CA
Carman
1 year ago
I think Azure Logic Apps might be the best choice here since they are designed for workflow automation and require less coding.
LE
Leandro
1 year ago
I'm pretty confident that the right answer is to obtain team buy-in before making any changes. The scrum master shouldn't just unilaterally reassign the task without getting the team's input.
LO
Louis
1 year ago
This seems like a good solution to me. The Bulk create user operation should make it easy to import the user information from the CSV file and create all the accounts at once. I'll give it a try and see how it goes.