Exam SC-900 topic 1 question 66 discussion

Correct answer. Workbooks in Azure Sentinel are interactive dashboards that allow users to explore and analyze security data. They provide a visual representation of security data, allowing users to quickly identify patterns and trends. Workbooks can be customized to display specific data and can be shared with other users. Playbooks in Azure Sentinel are automated response capabilities that allow users to take action on security incidents. They provide a set of predefined playbooks and actions to help users respond to security incidents quickly and effectively. Playbooks can be triggered by specific events or conditions, and can be customized to fit the needs of the organization. They also have the capability to integrate with other Azure services and third-party tools, and can be used to automate incident triage, investigations, and remediation tasks. In summary, Workbooks are for analysis and visualization of security data, whereas Playbooks are for automated incident response.

https://learn.microsoft.com/en-us/azure/sentinel/overview#automate-and-orchestrate-common-tasks-by-using-playbooks

Playbooks is the correct ans.

Answer is correct Keyword = Workbooks = Microsoft Sentinal

the word here is AUTOMATE, to automate must be Playbooks

Playbooks

Answer is correct Playbook