Question
You have an Azure subscription that has Microsoft Defender for Cloud enabled.
Suspicious authentication activity alerts have been appearing in the Workload protections dashboard.
You need to recommend a solution to evaluate and remediate the alerts by using workflow automation. The solution must minimize development effort.
What should you include in the recommendation?
- A. Azure Monitor webhooks
- B. Azure Event Hubs
- C. Azure Functions apps
- D. Azure Logics Apps Correct
Explanation
Azure Logic Apps is the appropriate choice for automating workflows in response to suspicious activity alerts from Microsoft Defender for Cloud, as it supports integration with security services and enables automated remediation steps without requiring extensive development effort.
