Azure Security Center Workflow Automation | Modify WF1 to Send Email Messages to Distribution Group Alerts

Modify Workflow Automation to Send Email Messages to Distribution Group Alerts

Prev Question Next Question

Question

You have an Azure subscription named Sub1.

In Azure Security Center, you have a workflow automation named WF1. WF1 is configured to send an email message to a user named User1.

You need to modify WF1 to send email messages to a distribution group named Alerts.

What should you use to modify WF1?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

C

https://docs.microsoft.com/en-us/azure/security-center/workflow-automation https://docs.microsoft.com/en-us/learn/modules/resolve-threats-with-azure-security-center/6-exercise-configure-playbook

To modify WF1 in Azure Security Center to send email messages to a distribution group named Alerts, you should use Azure Logic Apps Designer, which is option C.

Azure Logic Apps Designer is a cloud service that allows you to create workflows that integrate with various Azure services, including Azure Security Center. It provides a graphical interface for creating workflows, and you can use pre-built connectors to integrate with various Azure services.

To modify WF1 using Azure Logic Apps Designer, follow these steps:

  1. Log in to the Azure portal (https://portal.azure.com).
  2. Navigate to the Security Center.
  3. Select the Workflow Automation tab.
  4. Click on the name of the workflow automation you want to modify (in this case, WF1).
  5. Click on the Edit button to open the workflow in Azure Logic Apps Designer.
  6. In the designer, locate the step that sends the email message to User1.
  7. Click on the step to open its settings.
  8. Modify the email address to the email address of the distribution group named Alerts.
  9. Save the changes.

After you have modified WF1, it will send email messages to the distribution group named Alerts instead of User1.

Option A (Azure Application Insights) is a service that helps you monitor the performance and usage of your applications. It is not relevant to modifying a workflow automation in Azure Security Center.

Option B (Azure Monitor) is a service that helps you monitor the health and performance of your Azure resources. While it can be used to monitor Azure Security Center, it is not relevant to modifying a workflow automation in Azure Security Center.

Option D (Azure DevOps) is a set of development tools that can help you manage your software development lifecycle. It is not relevant to modifying a workflow automation in Azure Security Center.

Prev Question Next Question