Exam SC-500 Topic 1 Question 78 Discussion

Actual exam question for Microsoft's SC-500 exam
Question #: 78
Topic #: 1
You are configuring a new Microsoft Sentinel workspace named Workspace1.
You have an external IT Service Management (ITSM) system that is NOT supported by any Microsoft Sentinel solutions in Azure Marketplace.
You need to ensure that Workspace1 creates service tickets in the ITSM system for all new security incidents.
What should you create?

Suggested Answer: A Vote an answer

A Microsoft Sentinel playbook is an Azure Logic Apps workflow that automates response actions when incidents are created. It can integrate with an external ITSM system through an available connector or API call to create service tickets for new security incidents, even when no packaged Microsoft Sentinel solution exists for that system.
Reference:
https://learn.microsoft.com/en-us/azure/sentinel/automation/integrations
https://learn.microsoft.com/en-us/azure/sentinel/automation/automation
https://learn.microsoft.com/en-us/azure/sentinel/automation/playbook-recommendations

by Frank at Jul 15, 2026, 07:09 PM

Limited Time Offer

15%

Off

Get Premium SC-500 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10