New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft SC-200 Exam - Topic 11 Question 3 Discussion

Actual exam question for Microsoft's SC-200 exam
Question #: 3
Topic #: 11
[All SC-200 Questions]

You have an existing Azure logic app that is used to block Azure Active Directory (Azure AD) users. The logic app is triggered manually.

You deploy Azure Sentinel.

You need to use the existing logic app as a playbook in Azure Sentinel. What should you do first?

Show Suggested Answer Hide Answer
Suggested Answer: B

Contribute your Thoughts:

0/2000 characters
Val
4 months ago
I’m surprised this isn’t more straightforward!
upvoted 0 times
...
Xuan
4 months ago
Adding a data connector seems unnecessary here.
upvoted 0 times
...
Jovita
4 months ago
Wait, why would you need a new scheduled query rule?
upvoted 0 times
...
Shawna
5 months ago
Totally agree, D makes the most sense!
upvoted 0 times
...
Gerald
5 months ago
You need to modify the trigger in the logic app first.
upvoted 0 times
...
Osvaldo
5 months ago
I vaguely remember that we need to modify the trigger in the logic app to make it work with Sentinel, but I’m not completely confident about that.
upvoted 0 times
...
Aretha
5 months ago
I feel like configuring a custom Threat Intelligence connector could be important, but I can't recall if that's necessary right now.
upvoted 0 times
...
Filiberto
5 months ago
I think we might need to add a data connector first, similar to that practice question we did on setting up alerts in Sentinel.
upvoted 0 times
...
Jesusita
5 months ago
I remember we talked about how to integrate logic apps with Sentinel, but I'm not sure if modifying the trigger is the first step.
upvoted 0 times
...
Laquita
5 months ago
I'm a little confused by this question. I don't have a strong sense of the 5G latency requirements off the top of my head. I'll need to think it through carefully and eliminate the options that don't seem plausible.
upvoted 0 times
...
Bong
5 months ago
Based on my experience with the WFM Web Supervisor, I believe the answer is B. Setting the extended end date is the way to accommodate building schedules for longer than 6 weeks.
upvoted 0 times
...
Glenn
5 months ago
Okay, I've got this. The intermittent manufacturing environment, where production is irregular and unpredictable, would be the most complex for promising completion dates. I'm confident in this answer.
upvoted 0 times
...
Broderick
5 months ago
Arterial grafts definitely have better long-term patency than venous grafts. So C is definitely false. Process of elimination is key here.
upvoted 0 times
...
Vi
5 months ago
This one seems pretty straightforward. Spinning up a bunch of temporary mining servers is likely part of a Sybil attack, where an attacker tries to create a large number of fake identities to gain disproportionate influence.
upvoted 0 times
...

Save Cancel