SC-200 Certification Practice Question #92

Question

You have an Azure subscription that uses Microsoft Defender for Cloud.

You need to create a workflow that will send a Microsoft Teams message to the IT department of your company when a new Microsoft Secure Score action is generated.

Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Accepted Answer

A new Microsoft Secure Score action is a Defender for Cloud **recommendation**, so the logic app must use the **recommendation** trigger (not the alert or regulatory-compliance tiles). MS Learn states the logic app must exist before a workflow automation can reference it, so creating the logic app is step 1; you then define the trigger condition and finally configure the workflow automation that ties the condition to the logic-app action. The top-voted community answer (ceejay12, 38 👍) plus g_man_rap and Vokuhila all give this exact order. Confidence is held at 80 because the community is genuinely split — a sizable minority (shadowdark83 17 👍, Murtuza 12 👍) places "Configure workflow automation" before "Configure a trigger condition" — but the single highest-voted answer and the trigger-tile elimination keep the recommendation-trigger-first ordering on top.

More SC-200 practice questions