Question
You have a Microsoft 365 E5 subscription and an Azure subscription.
You are designing a Microsoft deployment.
You need to recommend a solution for the security operations team. The solution must include custom views and a dashboard for analyzing security events.
What should you recommend using in Microsoft Sentinel?
- A. notebooks
- B. playbooks
- C. workbooks Correct
- D. threat intelligence
Explanation
Workbooks in Microsoft Sentinel provide a flexible canvas for creating custom views and dashboards to analyze security events, which is what the security operations team needs. Notebooks are for hunting and investigation with Jupyter, playbooks automate responses with Logic Apps, and threat intelligence manages indicators of compromise.
