What should you create first?

You have an Azure subscription that contains an Azure logic app named app1 and a Microsoft Sentinel workspace that has an Azure AD connector. You need to ensure that app1 launches when Microsoft Sentinel detects an Azure AD-generated alert.

What should you create first?
A . a repository connection
B. awatchlist
C. an analytics rule
D. an automation rule

View Answer

Answer: D