Exam SC-200 topic 2 question 31 discussion

This solution does not meet the sequence specified in the question. The solution must generate a test email. Correct answer is: 1) Create logic app 2) Add workflow automation (specifies action - send email) 3) Trigger logic app (creates alert->workflow automation activates -> sends email)

https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation Create a logic app and define when it should automatically run 1. From Defender for Cloud's sidebar, select Workflow automation. 2. To define a new workflow, select Add workflow automation. 3. From the Actions section, select visit the Logic Apps page to begin the logic app creation process. 4. Select (+) Add. 5. Fill out all required fields and select Review + Create. 6. Review the information you entered and select Create. 7. After you've defined your logic app, return to the workflow automation definition pane ("Add workflow automation"). Select Refresh to ensure your new logic app is available for selection. 8. Select your logic app and save the automation. The logic app dropdown only shows those with supporting Defender for Cloud connectors mentioned above. Given the above, the answer should be: 1. From Workflow automation in Defender for Cloud, add a workflow automation 2. From Logic App Designer, create a logic app 3. From Logic App Designer, run a trigger

The correct answer is: - Step1: Create a Logic app (this will a part of process of creating a workflow automation), the logic app will use "Defender for cloud alert is triggered" as a trigger. The logic app will have a an action item to send email notifications. When the workflow automation in step2 will run, it will automatically run this logic app. - Step2: Create a workflow automation & use "Security alert" as the cloud data type. This will make sure that this workflow automation will run whenever there is a security alert generated. In the action option "select the logic app" created in Step1. If you do not create the logic app in step1, then it will NOT be shown in the workflow automation page. - Step3: From the Security alerts in MDC, create a sample alert. There is a sample alert for "digital currency mining". Once the sample security alert is created, it will trigger the workflow automation & the workflow automation will trigger the logic app. The logic app will send the email. This is how you do it in real world.

Keep it simple & don't overthink: You will first start with creating a workflow automation, during the process you will create a logic app as one of the step. In workflow automation you will define the Trigger conditions. You can use "alert name contains" to define digital currency mining as a trigger. During the logic app creation you will use send email as an action. Once the logic app is created, you will generate a sample alert, this will ensure/test that the workflow automation & logic app in use are both working fine. The answer is: Add workflow automation Create a logic app Create a sample alert. There is a sample alert for digital currency mining (ref: https://learn.microsoft.com/en-us/azure/defender-for-cloud/alert-validation)

See, you must have a Logic app available to be used for creating workflow automation steps, and you need to have an alert by a trigger for setting up the automation, therefore, the ans should be: - create the logic app - trigger the logic app to test - and finally, add the workflow automation

Correct

The answer is correct! https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation

https://learn.microsoft.com/en-us/azure/defender-for-cloud/workflow-automation Create a logic app and define when it should automatically run Manually trigger a logic app Configure workflow automation at scale using the supplied policies

Estas son las respuestas correctas: 1. From Logic App Designer, create a logic App. -> Correcto: Primero necesitas que exista un LogicApp. 2. From Workflow automation in Defender for Cloud, add workflow automation. -> Correcto: agregar el Logic App antes creado. 3. From Security alerts in Defender for Cloud, create a sample alerta -> Correcto: Para realizar y probar que tu Logic App funciona.

On exam - 19 June 2023

If you trigger the app, before you create the workflow, then what's the point? The provided answer doesnt make any sense, first you need to create the workflow and then trigger the alert

Answer is correct. You should: create the logic app trigger the logic app to test and finally add the workflow automation,

Correct. 1. Create Logic App 2. trigger (test) 3. apply

And what happend with "create a sample alert"??