Discuss Microsoft SC-200 Exam Topic 3 Question 1

You have a playbook in Azure Sentinel.

When you trigger the playbook, it sends an email to a distribution group.

You need to modify the playbook to send the email to the owner of the resource instead of the distribution group.

What should you do?

AAdd a parameter and modify the trigger.

BAdd a custom data connector and modify the trigger.

CAdd a condition and modify the action.

DAdd a parameter and modify the action.

Suggested Answer: D

https://azsec.azurewebsites.net/2020/01/19/notify-azure-sentinel-alert-to-your-email-automatically/

Get Premium SC-200 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Tammara 12 months ago

Adding a custom data connector seems unnecessary.

Emilio 1 year ago

Surprised this isn't more straightforward!

Fernanda 1 year ago

I think option C could work too, but not sure.

Luis 1 year ago

Definitely option D! Makes the most sense.

Mabelle 1 year ago

You need to add a parameter for the owner's email.

Beata 1 year ago

I think we did a case study where we had to change the recipient of an email. If I recall correctly, modifying the action was the way to go.

Quentin 1 year ago

I’m a bit confused about whether to add a condition or a parameter. I feel like both could potentially work, but I need to think it through.

Aliza 1 year ago

This question feels similar to one we practiced about sending alerts. I think modifying the action might be the key.

Altha 1 year ago

I remember we discussed modifying triggers in playbooks, but I'm not sure if adding a parameter is the right approach here.

Bette 1 year ago

Hmm, I'm a bit unsure about this one. The options seem to cover a lot of different features, so I'll need to think through each one to make sure I understand what they're asking.

Marti 1 year ago

This question seems pretty straightforward. I think the key is to focus on the role hierarchy and how changes to that can impact data visibility and sharing.

Salley 1 year ago

Was it the creators or the developers who have the most control? I need to remember that concept better.

Lorrine 1 year ago

Okay, I think I've got a strategy for this. Company X needs to ensure it doesn't inadvertently use any child labor from Company Y, and it should also try to persuade Y to stop the unethical practice.

Elenora 1 year ago

I studied the McKinsey model but I'm confused if E fits here or if it's more about the soft Ss.

Microsoft SC-200 Exam - Topic 3 Question 1 Discussion