Question 26

Question

HOTSPOT You need to use an Azure Resource Manager template to create a workflow automation that will trigger an automatic remediation when specific security alerts are received by Azure Security Center. How should you complete the portion of the template that will provision the required Azure resources? To answer, select the appropriate options in the answer area.

PreciseSec8658 · Answer

That makes sense, it's actually workflowAutomations now. Microsoft shifted from automationScripts to workflowAutomations for these ARM-based workflows in Defender for Cloud.

Jack V. · Answer

Yeah, it's workflowAutomations in the ARM template now. Microsoft switched over from automationScripts, so for Defender for Cloud or Security Center automations you should use that resource type for auto-remediation workflows. Seen this in newer docs. Correct me if I've missed a change back.

Priya A. · Answer

automationScripts section, that's what I picked on similar exam sims. Official docs and sample templates are good for double-checking.

Hannah R. · Answer

automationScripts sectionHad something like this in a mock, went with 'automationScripts' for the resources section. Pretty sure it's that, since automations for remediation use that schema block. Could be wrong though if they updated the templates.

Microsoft SC-200 Security Operations Analyst Real Exam Questions [October 2026 Update] Quiz

Premium Access Includes