What should you create first?

exams SC-200 V6 SC-200 exam 0 Comments

You have an Azure subscription that contains an Azure logic app named app1 and a Microsoft Sentinel workspace that has an Azure AD connector. You need to ensure that app1 launches when Microsoft Sentinel detects an Azure AD-generated alert.

What should you create first?
A . a repository connection
B. awatchlist
C. an analytics rule
D. an automation rule

Answer: D