Implement activity and event collection in Microsoft Sentinel
3 practice questions under this official exam objective (SC-500), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
3 total · page 1 of 1Does Creating a Playbook Auto-Assign New Sentinel Incidents?
Creating a playbook in Microsoft Sentinel does not, by itself, assign new incidents to the Tier 1 analysts group or flag them for triage. The page con
Does a hunting query auto-assign new Sentinel incidents to Tier 1?
Microsoft Sentinel hunting queries are proactive, analyst-driven searches over raw logs and cannot assign ownership or add triage tags to new incident
Integrating Microsoft Sentinel with Unsupported ITSM Systems
Learn how to connect Microsoft Sentinel to unsupported ITSM systems using Playbooks (Azure Logic Apps) instead of native Marketplace solutions.