MENU
You have an Azure Sentinel workspace.
You need to test a playbook manually in the Azure portal. From where can you run the test in Azure Sentinel?
Suggested Answer: D
Get Premium SC-200 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
13 comments · newest first
ZO
Zona
11 months ago
I thought it was under Analytics at first, but I guess not.
LE
Leota
11 months ago
Definitely A, that's where all the action happens!
RO
Royal
12 months ago
Wait, are you sure it's not in Incidents? That seems like a logical place too.
MA
Malinda
12 months ago
Totally agree, it's the easiest way to do it!
JE
Jeannetta
1 year ago
You can test playbooks directly from the Playbooks section.
NA
Nakita
1 year ago
I’m leaning towards Playbooks too, but I wish I had reviewed that part more thoroughly before the exam.
JO
Johnna
1 year ago
I feel like it could also be in the Incidents area, but that seems less likely for testing a playbook.
KR
Kris
1 year ago
I remember practicing a similar question, and I believe it was definitely related to Playbooks.
MA
Marci
1 year ago
I think we can run the test from the Playbooks section, but I'm not entirely sure if that's the only place.
AL
Alica
1 year ago
Hmm, I'm not sure about this one. I'll have to think it through carefully.
SE
Serina
1 year ago
I'm a bit confused on this one. I know quality assurance is about preventing defects, but I'm not sure which of these options is the best example. I might need to review my notes on quality assurance before answering.
JA
Jacqueline
1 year ago
Hmm, I'm not sure about this one. There are a few different options that could be relevant for attribution, like the threat actor behavior or the authentication logs. I'll have to think this through carefully.
FE
Felix
1 year ago
I'm pretty confident that double-spend attacks are disincentivized in the long-term on blockchains like Bitcoin. The consensus mechanism makes it very difficult to successfully execute a double-spend.