SC-200 Certification Practice Question #62

Question

You need to use an Azure Resource Manager template to create a workflow automation that will trigger an automatic remediation when specific security alerts are received by Azure Security Center.
How should you complete the portion of the template that will provision the required Azure resources? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

This template is the official `securitycenter-create-automation-for-alertnamecontains` quickstart cited by the top comment (28 👍) and confirmed by MS Learn. The workflow-automation resource type is `Microsoft.Security/automations`, so the first dropdown — completing `"[___]/automations"` — must be **Microsoft Security**. The second dropdown builds the trigger callback URL for the empty triggerable Logic App via `resourceId(..., '[___]/workflows/triggers', ...)`; a Logic App workflow is `Microsoft.Logic/workflows`, so it must be **Microsoft Logic**. "Microsoft Automation" (`Microsoft.Automation`) is a distractor referring to Azure Automation, which is unrelated to this Defender for Cloud automation. Confidence is 90 (not higher) because the answer is derived from the rendered template image plus docs rather than an explicit suggested-answer image, but all signals — community, the pasted JSON, and the MS Learn quickstart — agree.

More SC-200 practice questions