Topic 1 · Question 233
You need to automate responses to threats detected by Azure Sentinel.
What should you use?
A. adaptive network hardening in Azure Security Center
B. Azure Service Health
C. Azure Monitor workbooks
D. adaptive application controls in Azure Security Center
Top comment
Community votes:C · 3 (75%)A · 1 (25%)
kwldgseeker▲ 45Highly votedApril 17, 2022 10:00 pm
Either the answer is playbooks (which is not a provided choice) or the question itself is wrong. Workbooks does not provide for automation. It is a visualization / reporting tool. If you still doubt, look up "automate responses to threats detected by Azure Sentinel." in Google and you will find "Playbooks" in the results and nowhere will you find "Workbooks". I really love the spirit and intent of the site and have respect fort the small team behind it. At the same time I have to question where these questions came from. There are far too many discrepancies, errors and omissions to justify the asking price (which I regrettably paid as I thought my membership was for all tests, not just the AZ-900!). Clean up the discrepancies, errors and omissions (and include more than just one test) and it will be worth the asking price.
4 more highly voted comments
TamHas▲ 22Highly votedJanuary 22, 2022 07:47 pm
This answer is correct, see statement from Microsoft site:
Once you have connected your data sources to Microsoft Sentinel, you can visualize and monitor the data using the Microsoft Sentinel adoption of Azure Monitor Workbooks, which provides versatility in creating custom dashboards. While the Workbooks are displayed differently in Microsoft Sentinel, it may be useful for you to see how to create interactive reports with Azure Monitor Workbooks. Microsoft Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.
https://docs.microsoft.com/en-us/azure/sentinel/monitor-your-data
Once you have connected your data sources to Microsoft Sentinel, you can visualize and monitor the data using the Microsoft Sentinel adoption of Azure Monitor Workbooks, which provides versatility in creating custom dashboards. While the Workbooks are displayed differently in Microsoft Sentinel, it may be useful for you to see how to create interactive reports with Azure Monitor Workbooks. Microsoft Sentinel allows you to create custom workbooks across your data, and also comes with built-in workbook templates to allow you to quickly gain insights across your data as soon as you connect a data source.
https://docs.microsoft.com/en-us/azure/sentinel/monitor-your-data
johnny1001▲ 18Highly votedMarch 10, 2022 11:10 am
oh yes you do
TheKraemer▲ 13Highly votedJanuary 13, 2022 12:54 pm
The explanation is missing here! I don't spend money for this!!
Tin_Nguyen▲ 7Highly votedApril 05, 2022 06:44 pm
C for me
"The company will also use Azure Monitor Workbooks to automate responses to threats."
https://docs.microsoft.com/en-us/learn/modules/protect-against-security-threats-azure/3-detect-respond-threats-sentinel?ns-enrollment-type=learningpath&ns-enrollment-id=learn.az-900-describe-general-security-network-security-features
"The company will also use Azure Monitor Workbooks to automate responses to threats."
https://docs.microsoft.com/en-us/learn/modules/protect-against-security-threats-azure/3-detect-respond-threats-sentinel?ns-enrollment-type=learningpath&ns-enrollment-id=learn.az-900-describe-general-security-network-security-features